llavon-ime-fcitx5-git
MEDIUM
maintainer billy948787
0 votes
scanned 2026-09-17 07:25:15.887874
Why flagged
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
Triggered rules
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:24
"${_model_file}::https://huggingface.co/tony65535/llavon-ime-llama-250m-GGUF/resolve/main/${_model_file}"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: llavon-ime contributors
2
3
_pkgname=llavon-ime-fcitx5
4
_srcname=ime-fcitx5
5
_model_file=llavon-ime-llama-250m-Q4_K_M.gguf
6
pkgname=${_pkgname}-git
7
pkgver=0.6.3.r2.g5aacc4f
8
pkgrel=1
9
pkgdesc='Fcitx5 frontend and local inference service for Llavon IME'
10
arch=('x86_64' 'aarch64')
11
url='https://github.com/llavon-ime/ime-fcitx5'
12
license=('BSD-2-Clause' 'MIT' 'Apache-2.0' 'BSL-1.0' 'CC-BY-NC-4.0')
13
depends=('fcitx5' 'glibc' 'libgcc' 'libstdc++' 'vulkan-icd-loader')
14
makedepends=('at-spi2-core' 'cmake' 'curl' 'git' 'ninja' 'python' 'tar' 'unzip' 'zip')
15
optdepends=(
16
'at-spi2-core: read prediction context from the focused widget (AT-SPI)'
17
'fcitx5-configtool: graphical configuration for fcitx5'
18
'vulkan-driver: Vulkan GPU acceleration'
19
)
20
provides=("${_pkgname}")
21
conflicts=("${_pkgname}" "${_pkgname}-preview-git" "${_pkgname}-preview-git-debug")
22
source=(
23
"${_srcname}::git+https://github.com/llavon-ime/ime-fcitx5.git#branch=main"
24
"${_model_file}::https://huggingface.co/tony65535/llavon-ime-llama-250m-GGUF/resolve/main/${_model_file}"
25
)
26
sha256sums=('SKIP' 'SKIP')
27
28
pkgver() {
29
cd "${_srcname}"
30
31
local describe base_version
32
describe="$(git describe --long --tags --abbrev=7 2>/dev/null || true)"
33
if [[ -n "${describe}" ]]; then
34
printf '%s\n' "${describe}" | sed 's/^v//;s/\([^-]*-g\)/r\1/;s/-/./g'
35
return
36
fi
37
38
base_version="$(sed -n 's/^project(llavon-ime VERSION \([^ ]*\).*/\1/p' fcitx5/CMakeLists.txt)"
39
base_version="${base_version:-0.1.0}"
40
printf '%s.r%s.g%s\n' "${base_version}" "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
41
}
42
43
build() {
44
git -C "${_srcname}" submodule update --init --recursive
45
"${srcdir}/${_srcname}/vcpkg/bootstrap-vcpkg.sh" -disableMetrics
46
47
cmake -S "${_srcname}/ime-unix-service" -B unix-service-build -G Ninja \
48
-DCMAKE_BUILD_TYPE=None \
49
-DCMAKE_INSTALL_PREFIX=/usr \
50
-DCMAKE_TOOLCHAIN_FILE="${srcdir}/${_srcname}/vcpkg/scripts/buildsystems/vcpkg.cmake" \
51
-DVCPKG_MANIFEST_FEATURES=llama-vulkan \
52
-DIME_UNIX_SERVICE_BUILD_TESTS=ON
53
cmake --build unix-service-build
54
55
cmake -S "${_srcname}/fcitx5" -B build -G Ninja \
56
-DCMAKE_BUILD_TYPE=None \
57
-DCMAKE_INSTALL_PREFIX=/usr \
58
-DCMAKE_TOOLCHAIN_FILE="${srcdir}/${_srcname}/vcpkg/scripts/buildsystems/vcpkg.cmake" \
59
-DIME_FCITX5_INSTALLED_MODEL_PATH="/usr/share/llavon-ime/models/${_model_file}" \
60
-DIME_FCITX5_DISPLAY_VERSION="${pkgver}" \
61
-DIME_FCITX5_BUILD_TESTS=OFF
62
cmake --build build
63
}
64
65
check() {
66
ctest --test-dir unix-service-build --output-on-failure
67
}
68
69
package() {
70
DESTDIR="${pkgdir}" cmake --install unix-service-build
71
DESTDIR="${pkgdir}" cmake --install build
72
install -Dm644 "${srcdir}/${_model_file}" \
73
"${pkgdir}/usr/share/llavon-ime/models/${_model_file}"
74
cmake \
75
-DVCPKG_INSTALLED_DIR="${srcdir}/unix-service-build/vcpkg_installed" \
76
-DDESTINATION="${pkgdir}/usr/share/licenses/${pkgname}" \
77
-DPROJECT_ROOT="${srcdir}/${_srcname}" \
78
-P "${srcdir}/${_srcname}/scripts/install-licenses.cmake"
79
}
80
Changes since previous scan
--- PKGBUILD @ 2026-09-17 03:24+++ PKGBUILD @ 2026-09-17 07:25@@ -4,7 +4,7 @@ _srcname=ime-fcitx5 _model_file=llavon-ime-llama-250m-Q4_K_M.gguf pkgname=${_pkgname}-git-pkgver=0.6.3.r1.g73ffdb2+pkgver=0.6.3.r2.g5aacc4f pkgrel=1 pkgdesc='Fcitx5 frontend and local inference service for Llavon IME' arch=('x86_64' 'aarch64')Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 07:25:15 | Medium | 1 |
| 2026-09-17 03:24:22 | Medium | 1 |
| 2026-09-17 01:24:19 | Medium | 1 |
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 13:22:46 | Medium | 1 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 23:20:44 | Medium | 1 |
| 2026-09-15 15:19:57 | Medium | 1 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 15:17:35 | Medium | 1 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 03:13:35 | Medium | 1 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 17:12:25 | Medium | 1 |
| 2026-09-12 15:12:25 | Medium | 1 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 01:21:31 | Medium | 1 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 15:19:51 | Medium | 1 |