matlab-mpm-input

MEDIUM
maintainer vitaliikuzhdin 0 votes scanned 2026-10-05 23:40:58.404909
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:20 "https://www.mathworks.com/content/dam/mathworks/mathworks-dot-com/products/mpm/mpm-input-files.zip"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Vitalii Kuzhdin <vitaliikuzhdin@gmail.com>
2
3pkgname="matlab-mpm-input"
4pkgver=R2026b+R2017b
5_latest="${pkgver%%+*}"
6_oldest="${pkgver#*+}"
7pkgrel=1
8pkgdesc="MATLAB Package Manager (input files)"
9arch=(
10 'any'
11)
12url="https://www.mathworks.com/products/mpm.html" # https://www.mathworks.com/mpm_input_files
13license=(
14 'custom:MATHWORKS CLOUD REFERENCE ARCHITECTURE LICENSE'
15)
16depends=(
17 'matlab-mpm'
18)
19source=(
20 "https://www.mathworks.com/content/dam/mathworks/mathworks-dot-com/products/mpm/mpm-input-files.zip"
21)
22sha256sums=('SKIP')
23
24_releases=()
25for ((_year="${_oldest:1:4}"; _year<="${_latest:1:4}"; _year++)); do
26 for _suffix in a b; do
27 local _release="R${_year}${_suffix}"
28
29 # skip versions before oldest
30 [[ "${_release}" < "${_oldest}" ]] && continue
31 # stop after latest
32 [[ "${_release}" > "${_latest}" ]] && break 2
33
34 _releases+=(
35 "${_release}"
36 )
37 provides+=(
38 "matlab-${_release,,}-mpm-input=${pkgver}"
39 "matlab-mpm-input-release=${_release}"
40 )
41 done
42done
43
44pkgver() {
45 cd "${srcdir}"
46 local releases
47 releases=($(bsdtar -tf "${source[0]##*/}" | grep -oiP 'r[0-9]{4}[ab]' | sort -u))
48
49 printf '%s+%s' "${releases[-1]/r/R}" "${releases[0]/r/R}"
50}
51
52package() {
53 cd "${srcdir}"
54 for _release in "${_releases[@]}"; do
55 _input="mpm-input-${_release,,}.txt"
56 [[ -f "${_input}" ]] || _input="mpm-input-${_release}.txt"
57
58 install -vDm644 "${_input}" \
59 "${pkgdir}/usr/share/matlab-mpm/input/${_release}.txt"
60 done
61
62 ln -vsf "${_latest}.txt" \
63 "${pkgdir}/usr/share/matlab-mpm/input/latest.txt"
64}
65

Changes since previous scan

--- PKGBUILD @ 2026-06-19 23:51
+++ PKGBUILD @ 2026-10-05 23:40
@@ -1,7 +1,7 @@
# Maintainer: Vitalii Kuzhdin <vitaliikuzhdin@gmail.com>
pkgname="matlab-mpm-input"
-pkgver=R2026a+R2017b
+pkgver=R2026b+R2017b
_latest="${pkgver%%+*}"
_oldest="${pkgver#*+}"
pkgrel=1
@@ -9,7 +9,7 @@
arch=(
'any'
)
-url="https://www.mathworks.com/products/mpm.html"
+url="https://www.mathworks.com/products/mpm.html" # https://www.mathworks.com/mpm_input_files
license=(
'custom:MATHWORKS CLOUD REFERENCE ARCHITECTURE LICENSE'
)
@@ -44,7 +44,7 @@
pkgver() {
cd "${srcdir}"
local releases
- releases=($(bsdtar -tf "${source[0]##*/}" | grep -oP 'r[0-9]{4}[ab]' | sort -u))
+ releases=($(bsdtar -tf "${source[0]##*/}" | grep -oiP 'r[0-9]{4}[ab]' | sort -u))
printf '%s+%s' "${releases[-1]/r/R}" "${releases[0]/r/R}"
}
@@ -52,10 +52,14 @@
package() {
cd "${srcdir}"
for _release in "${_releases[@]}"; do
- install -vDm644 "mpm-input-${_release,,}.txt" \
+ _input="mpm-input-${_release,,}.txt"
+ [[ -f "${_input}" ]] || _input="mpm-input-${_release}.txt"
+
+ install -vDm644 "${_input}" \
"${pkgdir}/usr/share/matlab-mpm/input/${_release}.txt"
done
- ln -vsf "${_latest}.txt" "${pkgdir}/usr/share/matlab-mpm/input/latest.txt"
+ ln -vsf "${_latest}.txt" \
+ "${pkgdir}/usr/share/matlab-mpm/input/latest.txt"
}

Scan history

Scanned at (UTC)SeverityRules
2026-10-05 23:40:58 Medium 1
2026-06-19 23:51:18 Clean 2
2026-06-19 22:34:54 Medium 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion