lilypond-devel

MEDIUM

maintainer david_goliath 0 votes scanned 2026-08-24 07:22:23.267746

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:32 source=("https://lilypond.org/downloads/sources/v${pkgver%.*}/$_pkgname-$pkgver.tar.gz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: David Seus <cryptointerest at posteo dot de>
    
      2# Contributor: lis
    
      3# Contributor: Robert Kubosz <kubosz.robert@gmail.com>
    
      4# Contributor: David Runge <dvzrv@archlinux.org>
    
      5# Contributor: Evgeniy Alekseev <arcanis at archlinux dot org>
    
      6# Contributor: Sergej Pupykin <pupykin.s+arch@gmail.com>
    
      7# Contributor: Geoffroy Carrier <geoffroy@archlinux.org>
    
      8# Contributor: William Rea <sillywilly@gmail.com>
    
      9# Contributor: Robert Emil Berge <filoktetes@linuxophic.org>
    
      10
    
      11pkgname=lilypond-devel
    
      12_pkgname=lilypond
    
      13pkgver=2.27.2
    
      14pkgrel=1
    
      15pkgdesc="Lilypond music engraving program (development release)"
    
      16arch=('x86_64')
    
      17url="https://lilypond.org"
    
      18license=('FDL1.3' 'GPL3' 'custom:OFL')
    
      19groups=('pro-audio')
    
      20depends=('gcc-libs' 'ghostscript' 'glibc' 'gsfonts' 'guile')
    
      21makedepends=('fontconfig' 'fontforge' 'freetype2' 'glib2' 'imagemagick' 'pango'
    
      22'python' 'rsync' 't1utils' 'texinfo' 'texlive-core' 'tex-gyre-fonts'
    
      23'texlive-langcyrillic' 'texlive-metapost' 'texlive-fontutils'
    
      24'texlive-plaingeneric' 'zip')
    
      25optdepends=(
    
      26  'python: for lilypond-book and other scripts'
    
      27  'tex-gyre-fonts: for extra fonts'
    
      28  'ttf-dejavu: for extra fonts'
    
      29)
    
      30provides=('lilypond=${pkgver}')
    
      31conflicts=('lilypond')
    
      32source=("https://lilypond.org/downloads/sources/v${pkgver%.*}/$_pkgname-$pkgver.tar.gz")
    
      33sha512sums=('fece8f050e4a541e24b2a3bf944db75137ca04a6c24e8fbdca77575d6ae50055255fcf9ebf472a0995e7f53af5a141cdae758df61df9ea336b65522fab791076')
    
      34b2sums=('77bd58184db294f25e2845ccb22211c5711e93197a6bf7b3cbb782f7f14966bfcdc18891ed63b017b8263b8e96e6e4b357662f4a1e9e0fb11e301c933b43e226')
    
      35
    
      36prepare() {
    
      37  cd "$_pkgname-$pkgver"
    
      38  autoconf --force --verbose
    
      39}
    
      40
    
      41build() {
    
      42  cd "$_pkgname-$pkgver"
    
      43  ./configure --prefix=/usr \
    
      44              GUILE_FLAVOR=guile-3.0
    
      45  make -j3
    
      46  make -j3 bytecode
    
      47}
    
      48
    
      49package() {
    
      50  depends+=('libfontconfig.so' 'libfreetype.so' 'libglib-2.0.so'
    
      51  'libgobject-2.0.so' 'libpangoft2-1.0.so' 'libpango-1.0.so')
    
      52  cd "$_pkgname-$pkgver"
    
      53  make DESTDIR="$pkgdir" install-bytecode
    
      54  make DESTDIR="$pkgdir" vimdir="/usr/share/vim/vimfiles" install
    
      55  install -vDm 644 LICENSE.OFL -t "${pkgdir}/usr/share/licenses/${pkgname}/"
    
      56  install -vDm 644 {AUTHORS,NEWS}.txt README.md \
    
      57    -t "${pkgdir}/usr/share/doc/${pkgname}/"
    
      58  # delete copied fonts, they are relied upon as optdepends
    
      59  # rm "${pkgdir}/usr/share/lilypond/${pkgver}/fonts/otf/"{C059,Nimbus,texgyre}*.otf
    
      60}
    
      61

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-08-24 07:22
@@ -10,7 +10,7 @@
 
 pkgname=lilypond-devel
 _pkgname=lilypond
-pkgver=2.27.1
+pkgver=2.27.2
 pkgrel=1
 pkgdesc="Lilypond music engraving program (development release)"
 arch=('x86_64')
@@ -30,8 +30,8 @@
 provides=('lilypond=${pkgver}')
 conflicts=('lilypond')
 source=("https://lilypond.org/downloads/sources/v${pkgver%.*}/$_pkgname-$pkgver.tar.gz")
-sha512sums=('5737f66a1946951de7b9a944b0645b4d19e915c8ec3e060a5c1edf995531a3f0d89f4d85d9a4c54f3d91d77adfde143e4006646093d1d45db30bbdda9ca95941')
-b2sums=('c833e1b2d3e429912ac5d3832162be1410cf305ba98f526befa9a8d7e232c9ffdafd8e20385493324b6f7820c5dcd126136c94608ccedee82e9806381891e822')
+sha512sums=('fece8f050e4a541e24b2a3bf944db75137ca04a6c24e8fbdca77575d6ae50055255fcf9ebf472a0995e7f53af5a141cdae758df61df9ea336b65522fab791076')
+b2sums=('77bd58184db294f25e2845ccb22211c5711e93197a6bf7b3cbb782f7f14966bfcdc18891ed63b017b8263b8e96e6e4b357662f4a1e9e0fb11e301c933b43e226')
 
 prepare() {
   cd "$_pkgname-$pkgver"

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-24 07:22:23	Medium	1
2026-06-19 19:07:35	Clean	2
2026-06-18 18:55:24	Clean	2
2026-06-18 16:11:54	Medium	1