libjxl-0.11

MEDIUM
maintainer ItachiSan 0 votes scanned 2026-09-01 15:48:43.798595
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:31 'git+https://skia.googlesource.com/skcms.git'

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Daniel Bermond <dbermond@archlinux.org>
2
3pkgbase=libjxl-0.11
4pkgname=('libjxl-0.11' 'libjxl-0.11-doc')
5pkgver=0.11.2
6pkgrel=1
7pkgdesc='JPEG XL image format reference implementation - 0.11 release'
8arch=('x86_64')
9url='https://jpeg.org/jpegxl/'
10license=('BSD-3-Clause')
11makedepends=(
12 'add-determinism'
13 'asciidoc'
14 'brotli'
15 'cmake'
16 'doxygen'
17 'giflib'
18 'git'
19 'gperftools'
20 'graphviz'
21 'gtest'
22 'highway'
23 'java-environment'
24 'libjpeg-turbo'
25 'libpng'
26 'python'
27 'xdg-utils')
28source=("git+https://github.com/libjxl/libjxl.git#tag=v${pkgver}"
29 'git+https://github.com/mm2/Little-CMS.git'
30 'git+https://github.com/webmproject/sjpeg.git'
31 'git+https://skia.googlesource.com/skcms.git'
32 'libjxl-testdata'::'git+https://github.com/libjxl/testdata.git'
33 'git+https://github.com/libjpeg-turbo/libjpeg-turbo.git')
34sha256sums=('0d1a459ef8390a8d991f8e6501c0292cc5f443a7663aeedf0922df855a61f9a2'
35 'SKIP'
36 'SKIP'
37 'SKIP'
38 'SKIP'
39 'SKIP')
40
41prepare() {
42 git -C libjxl submodule init
43
44 local _submodule
45
46 for _submodule in libjpeg-turbo sjpeg skcms
47 do
48 git -C libjxl config --local "submodule.third_party/${_submodule}.url" "${srcdir}/${_submodule}"
49 done
50
51 for _submodule in brotli googletest highway libpng zlib
52 do
53 git -C libjxl config --local "submodule.third_party/${_submodule}.update" none
54 done
55
56 git -C libjxl config --local submodule.third_party/lcms.url "${srcdir}/Little-CMS"
57 git -C libjxl config --local submodule.third_party/testdata.url "${srcdir}/libjxl-testdata"
58 git -C libjxl -c protocol.file.allow='always' submodule update
59}
60
61build() {
62 export CFLAGS+=' -DNDEBUG -ffat-lto-objects'
63 export CXXFLAGS+=' -DNDEBUG -ffat-lto-objects'
64 cmake -B build -S libjxl \
65 -G 'Unix Makefiles' \
66 -DCMAKE_BUILD_TYPE:STRING='None' \
67 -DCMAKE_INSTALL_PREFIX:PATH='/usr' \
68 -DCMAKE_POLICY_VERSION_MINIMUM:STRING='3.5.0' \
69 -DJPEGXL_BUNDLE_LIBPNG:BOOL='false' \
70 -DJPEGXL_ENABLE_AVX512:BOOL='true' \
71 -DJPEGXL_ENABLE_BENCHMARK:BOOL='false' \
72 -DJPEGXL_ENABLE_EXAMPLES:BOOL='false' \
73 -DJPEGXL_ENABLE_FUZZERS:BOOL='false' \
74 -DJPEGXL_ENABLE_OPENEXR:BOOL='false' \
75 -DJPEGXL_ENABLE_PLUGINS:BOOL='false' \
76 -DJPEGXL_ENABLE_VIEWERS:BOOL='false' \
77 -DJPEGXL_FORCE_SYSTEM_BROTLI:BOOL='true' \
78 -DJPEGXL_FORCE_SYSTEM_GTEST:BOOL='true' \
79 -DJPEGXL_FORCE_SYSTEM_HWY:BOOL='true' \
80 -DJPEGXL_INSTALL_JARDIR:STRING='/usr/share/java' \
81 -Wno-dev
82 cmake --build build
83 make -C build doc
84}
85
86check() {
87 ctest --test-dir build --output-on-failure
88}
89
90package_libjxl-0.11() {
91 depends=(
92 'brotli'
93 'giflib'
94 'glibc'
95 'gperftools'
96 'libgcc'
97 'highway'
98 'libjpeg-turbo'
99 'libpng'
100 'libstdc++')
101
102 DESTDIR="$pkgdir" cmake --install build
103 install -D -m644 libjxl/{LICENSE,PATENTS} -t "${pkgdir}/usr/share/licenses/${pkgname}"
104
105 # Remove development files, binaries, unversioned shared library symlinks, pkgconfig, and JNI/Java bindings to prevent conflicts with newer libjxl
106 rm -rf "${pkgdir}/usr/include"
107 rm -rf "${pkgdir}/usr/bin"
108 rm -rf "${pkgdir}/usr/lib/pkgconfig"
109 rm -rf "${pkgdir}/usr/share/java"
110 rm -rf "${pkgdir}/usr/share/man"
111 rm -f "${pkgdir}/usr/lib/libjxl_extras_codec.a"
112 rm -f "${pkgdir}/usr/lib/libjxl_jni.so"
113 rm -f "${pkgdir}/usr/lib"/{libjxl,libjxl_cms,libjxl_threads}.so
114}
115
116package_libjxl-0.11-doc() {
117 pkgdesc+=' (documentation)'
118
119 install -d -m755 "${pkgdir}/usr/share/doc"
120 install -D -m644 libjxl/{LICENSE,PATENTS} -t "${pkgdir}/usr/share/licenses/${pkgname}"
121 cp -dr --no-preserve='ownership' build/html "${pkgdir}/usr/share/doc/libjxl-0.11"
122}
123

Scan history

Scanned at (UTC)SeverityRules
2026-09-01 15:48:43 Medium 1
2026-07-20 09:16:05 Clean 3
2026-07-20 09:14:00 Medium 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion