matlab-gurobi

maintainer orphaned · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads source from gurobi.com, a non-whitelisted but official and plausibly project-owned host; the content is source code and MATLAB bindings, not a prebuilt executable, and is part of normal build process for the Gurobi solver.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads source from gurobi.com, a non-whitelisted but official and plausibly project-owned host; the content is source code and MATLAB bindings, not a prebuilt executable, and is part of normal build process for the Gurobi solver.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:20 source_x86_64=("${_pkgsrc}-x86_64.tar.gz::https://packages.gurobi.com/${pkgver%.*}/${_name}${pkgver}_linux64.tar.gz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer:  Vitalii Kuzhdin <vitaliikuzhdin@gmail.com>
    
      2# Contributor: Marcos M. Raimundo <marcosmrai@gmail.com>
    
      3# Contributor: Patrick Klein <patrick@libklein.com>
    
      4
    
      5# https://www.gurobi.com/downloads/gurobi-software/
    
      6# https://docs.gurobi.com/projects/optimizer/en/current/reference/releasenotes/platforms.html
    
      7
    
      8_name="gurobi"
    
      9pkgname="matlab-${_name}"
    
      10pkgver=12.0.3
    
      11pkgrel=2
    
      12pkgdesc="State-of-the-art solver for mathematical programming (MATLAB bindings)"
    
      13arch=('x86_64') # 'aarch64'
    
      14url="https://www.gurobi.com/products/gurobi-optimizer"
    
      15license=('custom:Gurobi EULA')
    
      16depends=("${_name}>=${pkgver}" 'matlab-release>=R2019a')
    
      17_pkgsrc="${_name}-${pkgver}"
    
      18source=("${_name}_setup.m")
    
      19# source_aarch64=("${_pkgsrc}-aarch64.tar.gz::https://packages.gurobi.com/${pkgver%.*}/${_name}${pkgver}_armlinux64.tar.gz")
    
      20source_x86_64=("${_pkgsrc}-x86_64.tar.gz::https://packages.gurobi.com/${pkgver%.*}/${_name}${pkgver}_linux64.tar.gz")
    
      21md5sums=('fde2cef01f075e2d28188576a2639b34')
    
      22md5sums_x86_64=('7cb948ba0906faf0d666b77a40687cc2')
    
      23b2sums=('5e704dc5b6ede40064772fea3fadcfb4728e8d402829162045364aae21f25aa59bea4e3ddb666050ef3351daae73f5b3f7f9c5d06c08fb8f2fc68d521a07570d')
    
      24b2sums_x86_64=('5dd5419d105e273da774423880b59f7dd13b6ee6136acd4710ef59357bb95faa8811b4f9d1b7ec616995241e483083d6f50d9482a805e9c7b1c894642004cf6e')
    
      25
    
      26if   [ "$CARCH" = 'aarch64' ]; then _arch=armlinux64;
    
      27elif [ "$CARCH" = 'x86_64'  ]; then _arch=linux64; fi
    
      28
    
      29prepare() {
    
      30  cd "${srcdir}/${_name}${pkgver//./}/${_arch}"
    
      31  cp "${srcdir}/${_name}_setup.m" matlab/
    
      32}
    
      33
    
      34package_matlab-gurobi() {
    
      35  cd "${srcdir}/${_name}${pkgver//./}/${_arch}"
    
      36  # is this the right path?
    
      37  # do '*.mexa64' files need 755 permissions?
    
      38  find "matlab" -type f \( -name '*.m' -o -name '*.mexa64' \) -exec \
    
      39    install -vDm644 "{}" "${pkgdir}/usr/lib/${_name}/{}" \;
    
      40
    
      41  cd "examples"
    
      42  find "matlab" -exec \
    
      43    install -vDm644 "{}" "${pkgdir}/usr/share/doc/${_name}/examples/{}" \;
    
      44}
    
      45

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2