madanalysis5

maintainer orphaned · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds from a source tarball on Launchpad, patches it for Python 2, and clones Delphes from GitHub during build—both sources are legitimate project-related repositories; no remote code execution or untrusted payloads are involved.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from a source tarball on Launchpad, patches it for Python 2, and clones Delphes from GitHub during build—both sources are legitimate project-related repositories; no remote code execution or untrusted payloads are involved.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: ReneganRonin <renegan.ronin@gmail.com>
    
      2
    
      3pkgname=madanalysis5
    
      4_majorversion=1
    
      5_minorversion=8
    
      6_maintenanceversion=59
    
      7pkgver=${_majorversion}.${_minorversion}.${_maintenanceversion}
    
      8_patch=1
    
      9pkgrel=1
    
      10arch=('x86_64')
    
      11license=('MIT')
    
      12depends=('tcsh' 'perl' 'python2')
    
      13makedepends=('gcc' 'make')
    
      14optdepends=('delphes' 'zlib' 'fastjet' 'texlive-core' 'texlive-bin')
    
      15source=("https://launchpad.net/${pkgname}/trunk/v${_majorversion}.${_minorversion}/+download/MadAnalysis5_v${_majorversion}.${_minorversion}_patch${_patch}.tgz"
    
      16"python2.patch"
    
      17        "no_check.patch"
    
      18        "mg5-ma5-fix.patch"
    
      19        "ma5.exp")
    
      20
    
      21
    
      22md5sums=('19192c11544d3971bcf89c6f91e81538'
    
      23         '1b22af322bf9a845ff4e3aef70eb01db'
    
      24         '1769cc46742b2f91d35052f7f5ebb258'
    
      25         'c6e82ddb7d1639ce57e0556790c5e294'
    
      26         'a0b10f6f274b9e1d55b99cb63f265168')
    
      27
    
      28
    
      29
    
      30prepare() {
    
      31    warning "Optional dependencies should be installed first if they are to be recognized by MadAnalysis 5"
    
      32
    
      33    msg2 "Fixing python references for python2"
    
      34    patch -p 1 < python2.patch
    
      35}
    
      36
    
      37build() {
    
      38    
    
      39    msg2 "Installing delphes to tools"
    
      40    cd ./madanalysis5/tools
    
      41    git clone https://github.com/delphes/delphes.git
    
      42    cd delphes
    
      43    make
    
      44    cd ../../../
    
      45
    
      46    msg2 "Initializing MA5 first run"
    
      47    expect -f ma5.exp
    
      48    printf '\n'
    
      49    
    
      50
    
      51    # Fix paths in certain files
    
      52    files=(
    
      53        tools/architecture.ma5
    
      54        tools/SampleAnalyzer/setup.sh
    
      55        tools/SampleAnalyzer/setup.csh
    
      56        tools/delphes/doc/Makefile.arch
    
      57        tools/SampleAnalyzer/Interfaces/Makefile_delphes
    
      58        tools/delphes/examples/ExternalFastJet/Makefile
    
      59    )
    
      60    for f in "${files[@]}"; do
    
      61        sed -i "s#${srcdir}/${pkgname}#/opt/${pkgname}#g" "${pkgname}/$f"
    
      62    done
    
      63
    
      64    # Prevent MA5 from checking for new builds as they are built on first install
    
      65    patch -p 1 < no_check.patch
    
      66
    
      67    msg2 "Compiling python source files"
    
      68    python2 -O -m compileall -qf "${srcdir}/${pkgname}" 2>&1 1>/dev/null || true
    
      69}
    
      70
    
      71package() {
    
      72    
    
      73# Copy everything of /opt/madanalysis5 since expects a particular directory
    
      74    # structure.
    
      75    install -dm755 "${pkgdir}/opt"
    
      76    cp -a "${srcdir}/${pkgname}" "${pkgdir}/opt/"
    
      77
    
      78    # Create symbolic links in /usr/bin to ma5
    
      79    install -dm755 "${pkgdir}/usr/bin"
    
      80    ln -s "/opt/${pkgname}/bin/ma5" "${pkgdir}/usr/bin/"
    
      81
    
      82    # Fix symbolic links within the package
    
      83    symlinks=(
    
      84        ClassesDict_rdict.pcm
    
      85        ExRootAnalysisDict_rdict.pcm
    
      86        FastJetDict_rdict.pcm
    
      87        libDelphes.so
    
      88        ModulesDict_rdict.pcm
    
      89    )
    
      90    for l in "${symlinks[@]}"; do
    
      91        ln -fs "/opt/${pkgname}/tools/delphes/$l" "${pkgdir}/opt/madanalysis5/tools/SampleAnalyzer/ExternalSymLink/Lib/"
    
      92    done
    
      93}
    
      94

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 03:12:42	MEDIUM	1
2026-06-18 16:11:54	CLEAN	0