llavon-ime-fcitx5-git
MEDIUM
maintainer billy948787
0 votes
scanned 2026-11-01 03:59:29.907809
Why flagged
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
Triggered rules
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:23
"${_model_file}::https://huggingface.co/tony65535/llavon-ime-llama-250m-GGUF/resolve/main/${_model_file}"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: llavon-ime contributors
2
3
_pkgname=llavon-ime-fcitx5
4
_srcname=ime-unix
5
_model_file=llavon-ime-llama-250m-Q4_K_M.gguf
6
pkgname=${_pkgname}-git
7
pkgver=0.10.5.r0.g4e93814
8
pkgrel=1
9
pkgdesc='Fcitx5 frontend and local inference service for Llavon IME'
10
arch=('x86_64' 'aarch64')
11
url='https://github.com/llavon-ime/ime-unix'
12
license=('BSD-2-Clause' 'MIT' 'Apache-2.0' 'BSL-1.0' 'CC-BY-NC-4.0')
13
depends=('at-spi2-core' 'fcitx5' 'glibc' 'libgcc' 'libstdc++' 'sqlite' 'vulkan-icd-loader' 'xdg-utils' 'curl' 'tar' 'coreutils' 'qt6-base' 'qt6-wayland')
14
makedepends=('autoconf-archive' 'cmake' 'curl' 'dbus' 'git' 'ninja' 'python' 'tar' 'unzip' 'zip')
15
optdepends=(
16
'fcitx5-configtool: graphical configuration for fcitx5'
17
'vulkan-driver: Vulkan GPU acceleration'
18
)
19
provides=("${_pkgname}")
20
conflicts=("${_pkgname}" "${_pkgname}-preview-git" "${_pkgname}-preview-git-debug")
21
source=(
22
"${_srcname}::git+https://github.com/llavon-ime/ime-unix.git#branch=main"
23
"${_model_file}::https://huggingface.co/tony65535/llavon-ime-llama-250m-GGUF/resolve/main/${_model_file}"
24
)
25
sha256sums=('SKIP' 'SKIP')
26
27
pkgver() {
28
cd "${_srcname}"
29
30
local describe base_version
31
describe="$(git describe --long --tags --abbrev=7 2>/dev/null || true)"
32
if [[ -n "${describe}" ]]; then
33
printf '%s\n' "${describe}" | sed 's/^v//;s/\([^-]*-g\)/r\1/;s/-/./g'
34
return
35
fi
36
37
base_version="$(sed -n 's/^project(llavon-ime VERSION \([^ ]*\).*/\1/p' fcitx5/CMakeLists.txt)"
38
base_version="${base_version:-0.1.0}"
39
printf '%s.r%s.g%s\n' "${base_version}" "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
40
}
41
42
build() {
43
git -C "${_srcname}" submodule update --init --recursive
44
"${srcdir}/${_srcname}/vcpkg/bootstrap-vcpkg.sh" -disableMetrics
45
46
cmake -S "${_srcname}/ime-unix-service" -B unix-service-build -G Ninja \
47
-DCMAKE_BUILD_TYPE=None \
48
-DCMAKE_INSTALL_PREFIX=/usr \
49
-DCMAKE_TOOLCHAIN_FILE="${srcdir}/${_srcname}/vcpkg/scripts/buildsystems/vcpkg.cmake" \
50
-DVCPKG_MANIFEST_FEATURES=llama-vulkan \
51
-DLLAVON_IME_WARNINGS_AS_ERRORS=ON \
52
-DIME_UNIX_SERVICE_BUILD_TESTS=ON
53
cmake --build unix-service-build
54
55
cmake -S "${_srcname}/fcitx5" -B build -G Ninja \
56
-DCMAKE_BUILD_TYPE=None \
57
-DCMAKE_INSTALL_PREFIX=/usr \
58
-DCMAKE_TOOLCHAIN_FILE="${srcdir}/${_srcname}/vcpkg/scripts/buildsystems/vcpkg.cmake" \
59
-DLLAVON_IME_INSTALLED_MODEL_PATH="/usr/share/llavon-ime/models/${_model_file}" \
60
-DLLAVON_IME_DISPLAY_VERSION="${pkgver}" \
61
-DLLAVON_IME_WARNINGS_AS_ERRORS=ON \
62
-DLLAVON_IME_BUILD_TESTS=OFF
63
cmake --build build
64
65
cmake -S "${_srcname}/engine" -B engine-tests -G Ninja \
66
-DCMAKE_BUILD_TYPE=None \
67
-DCMAKE_TOOLCHAIN_FILE="${srcdir}/${_srcname}/vcpkg/scripts/buildsystems/vcpkg.cmake" \
68
-DLLAVON_IME_WARNINGS_AS_ERRORS=ON \
69
-DLLAVON_IME_ENGINE_BUILD_TESTS=ON
70
cmake --build engine-tests --target llavon_ime_tests llavon_ime_rawkey_tests
71
}
72
73
check() {
74
ctest --test-dir unix-service-build --output-on-failure
75
ctest --test-dir engine-tests --output-on-failure -R '^llavon_ime_(tests|rawkey_tests)$'
76
}
77
78
package() {
79
DESTDIR="${pkgdir}" cmake --install unix-service-build
80
DESTDIR="${pkgdir}" cmake --install build
81
install -Dm644 "${srcdir}/${_model_file}" \
82
"${pkgdir}/usr/share/llavon-ime/models/${_model_file}"
83
cmake \
84
-DVCPKG_INSTALLED_DIR="${srcdir}/unix-service-build/vcpkg_installed" \
85
-DDESTINATION="${pkgdir}/usr/share/licenses/${pkgname}" \
86
-DPROJECT_ROOT="${srcdir}/${_srcname}" \
87
-P "${srcdir}/${_srcname}/scripts/install-licenses.cmake"
88
}
89
Changes since previous scan
--- PKGBUILD @ 2026-11-01 00:21+++ PKGBUILD @ 2026-11-01 03:59@@ -4,7 +4,7 @@ _srcname=ime-unix _model_file=llavon-ime-llama-250m-Q4_K_M.gguf pkgname=${_pkgname}-git-pkgver=0.10.1.r2.gf29d42c+pkgver=0.10.5.r0.g4e93814 pkgrel=1 pkgdesc='Fcitx5 frontend and local inference service for Llavon IME' arch=('x86_64' 'aarch64')Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 03:59:29 | Medium | 1 |
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 03:51:44 | Medium | 1 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 13:48:00 | Medium | 1 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 15:45:54 | Medium | 1 |
| 2026-10-26 09:44:33 | Medium | 1 |
| 2026-10-26 07:44:04 | Medium | 1 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 09:37:04 | Medium | 1 |
| 2026-10-23 05:36:55 | Medium | 1 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 15:32:06 | Medium | 1 |