llavon-ime-fcitx5-preview-git
MEDIUM
maintainer billy948787
0 votes
scanned 2026-11-01 03:59:29.907809
Why flagged
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
Triggered rules
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:26
"${_model_file}::https://huggingface.co/tony65535/llavon-ime-llama-250m-GGUF/resolve/main/${_model_file}"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: llavon-ime contributors
2
3
_pkgname=llavon-ime-fcitx5
4
_srcname=ime-unix
5
_model_file=llavon-ime-llama-250m-Q4_K_M.gguf
6
pkgname=${_pkgname}-preview-git
7
pkgver=0.10.3.r2.ga93dfcf
8
pkgrel=1
9
pkgdesc='Preview branch of the Fcitx5 frontend and local inference service for Llavon IME'
10
arch=('x86_64' 'aarch64')
11
url='https://github.com/llavon-ime/ime-unix/tree/preview'
12
license=('BSD-2-Clause' 'MIT' 'Apache-2.0' 'BSL-1.0' 'CC-BY-NC-4.0')
13
# The bundled .NET trainer appends managed assemblies to its ELF executable.
14
# makepkg's strip pass removes that payload even though it is already stripped.
15
options=('!strip')
16
depends=('at-spi2-core' 'fcitx5' 'glibc' 'libgcc' 'libstdc++' 'sqlite' 'vulkan-icd-loader' 'xdg-utils' 'curl' 'tar' 'coreutils' 'qt6-base' 'qt6-wayland')
17
makedepends=('autoconf-archive' 'cmake' 'curl' 'dbus' 'git' 'ninja' 'python' 'tar' 'unzip' 'zip')
18
optdepends=(
19
'fcitx5-configtool: graphical configuration for fcitx5'
20
'vulkan-driver: Vulkan GPU acceleration'
21
)
22
provides=("${_pkgname}")
23
conflicts=("${_pkgname}" "${_pkgname}-git" "${_pkgname}-git-debug")
24
source=(
25
"${_srcname}::git+https://github.com/llavon-ime/ime-unix.git#branch=preview"
26
"${_model_file}::https://huggingface.co/tony65535/llavon-ime-llama-250m-GGUF/resolve/main/${_model_file}"
27
)
28
sha256sums=('SKIP' 'SKIP')
29
30
pkgver() {
31
cd "${_srcname}"
32
33
local describe base_version
34
describe="$(git describe --long --tags --abbrev=7 2>/dev/null || true)"
35
if [[ -n "${describe}" ]]; then
36
printf '%s\n' "${describe}" | sed 's/^v//;s/\([^-]*-g\)/r\1/;s/-/./g'
37
return
38
fi
39
40
base_version="$(sed -n 's/^project(llavon-ime VERSION \([^ ]*\).*/\1/p' fcitx5/CMakeLists.txt)"
41
base_version="${base_version:-0.1.0}"
42
printf '%s.r%s.g%s\n' "${base_version}" "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
43
}
44
45
build() {
46
git -C "${_srcname}" submodule update --init --recursive
47
"${srcdir}/${_srcname}/vcpkg/bootstrap-vcpkg.sh" -disableMetrics
48
49
cmake -S "${_srcname}/ime-unix-service" -B unix-service-build -G Ninja \
50
-DCMAKE_BUILD_TYPE=None \
51
-DCMAKE_INSTALL_PREFIX=/usr \
52
-DCMAKE_TOOLCHAIN_FILE="${srcdir}/${_srcname}/vcpkg/scripts/buildsystems/vcpkg.cmake" \
53
-DVCPKG_MANIFEST_FEATURES=llama-vulkan \
54
-DLLAVON_IME_WARNINGS_AS_ERRORS=ON \
55
-DIME_UNIX_SERVICE_BUILD_TESTS=ON
56
cmake --build unix-service-build
57
58
cmake -S "${_srcname}/fcitx5" -B build -G Ninja \
59
-DCMAKE_BUILD_TYPE=None \
60
-DCMAKE_INSTALL_PREFIX=/usr \
61
-DCMAKE_TOOLCHAIN_FILE="${srcdir}/${_srcname}/vcpkg/scripts/buildsystems/vcpkg.cmake" \
62
-DLLAVON_IME_INSTALLED_MODEL_PATH="/usr/share/llavon-ime/models/${_model_file}" \
63
-DLLAVON_IME_DISPLAY_VERSION="${pkgver}" \
64
-DLLAVON_IME_WARNINGS_AS_ERRORS=ON \
65
-DLLAVON_IME_BUILD_TESTS=ON
66
cmake --build build
67
68
cmake -S "${_srcname}/engine" -B engine-tests -G Ninja \
69
-DCMAKE_BUILD_TYPE=None \
70
-DCMAKE_TOOLCHAIN_FILE="${srcdir}/${_srcname}/vcpkg/scripts/buildsystems/vcpkg.cmake" \
71
-DLLAVON_IME_WARNINGS_AS_ERRORS=ON \
72
-DLLAVON_IME_ENGINE_BUILD_TESTS=ON
73
cmake --build engine-tests --target llavon_ime_tests llavon_ime_rawkey_tests
74
}
75
76
check() {
77
ctest --test-dir unix-service-build --output-on-failure
78
ctest --test-dir engine-tests --output-on-failure -R '^llavon_ime_(tests|rawkey_tests)$'
79
ctest --test-dir build --output-on-failure
80
}
81
82
package() {
83
DESTDIR="${pkgdir}" cmake --install unix-service-build
84
DESTDIR="${pkgdir}" cmake --install build
85
install -Dm644 "${srcdir}/${_model_file}" \
86
"${pkgdir}/usr/share/llavon-ime/models/${_model_file}"
87
if [[ "${CARCH}" == "x86_64" ]]; then
88
local trainer_staging
89
trainer_staging="$(mktemp -d)"
90
"${srcdir}/unix-service-build/llavon-ime-lora" install-trainer --output-dir "${trainer_staging}"
91
mkdir -p "${pkgdir}/usr/lib/llavon-ime/tools/lora"
92
cp -a "${trainer_staging}/." "${pkgdir}/usr/lib/llavon-ime/tools/lora/"
93
chmod -R a+rX "${pkgdir}/usr/lib/llavon-ime/tools/lora"
94
chmod 0644 "${pkgdir}/usr/lib/llavon-ime/tools/lora/trainer-release.json"
95
rm -rf "${trainer_staging}"
96
else
97
echo "No pinned LoRA Trainer release exists for ${CARCH}; install it from the input method settings instead." >&2
98
fi
99
cmake \
100
-DVCPKG_INSTALLED_DIR="${srcdir}/unix-service-build/vcpkg_installed" \
101
-DDESTINATION="${pkgdir}/usr/share/licenses/${pkgname}" \
102
-DPROJECT_ROOT="${srcdir}/${_srcname}" \
103
-P "${srcdir}/${_srcname}/scripts/install-licenses.cmake"
104
}
105
Changes since previous scan
--- PKGBUILD @ 2026-11-01 00:21+++ PKGBUILD @ 2026-11-01 03:59@@ -4,7 +4,7 @@ _srcname=ime-unix _model_file=llavon-ime-llama-250m-Q4_K_M.gguf pkgname=${_pkgname}-preview-git-pkgver=0.10.3.r0.g17d840f+pkgver=0.10.3.r2.ga93dfcf pkgrel=1 pkgdesc='Preview branch of the Fcitx5 frontend and local inference service for Llavon IME' arch=('x86_64' 'aarch64')Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 03:59:29 | Medium | 1 |
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 15:52:51 | Medium | 1 |
| 2026-10-29 03:51:44 | Medium | 1 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 15:45:54 | Medium | 1 |
| 2026-10-26 07:44:04 | Medium | 1 |
| 2026-10-26 05:43:49 | Medium | 1 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 15:42:54 | Medium | 1 |
| 2026-10-25 13:42:47 | Medium | 1 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 11:37:13 | Medium | 1 |
| 2026-10-23 05:36:55 | Medium | 1 |
| 2026-10-23 00:02:19 | Low | 2 |