mcrl2

maintainer erackron · 8 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a tarball from the project's official domain, building from official source is normal for AUR packages, and the host, while not whitelisted, is plausibly the project's own.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's official domain, building from official source is normal for AUR packages, and the host, while not whitelisted, is plausibly the project's own.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:15 source=("http://mcrl2.org/download/release/$pkgname-$pkgver.tar.gz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Jorai Rijsdijk <aur@jrijsdijk.com>
    
      2
    
      3pkgname=mcrl2
    
      4pkgver=202607.0
    
      5pkgrel=1
    
      6pkgdesc="A formal specification language with an associated toolset."
    
      7arch=('i686' 'x86_64')
    
      8provides=('mcrl2')
    
      9conflicts=('mcrl2')
    
      10depends=('qt6-base' 'glu' 'hicolor-icon-theme')
    
      11optdepends=('python: for easily running the included examples')
    
      12makedepends=('boost' 'cmake' 'gcc>=7.0')
    
      13url=http://www.mcrl2.org
    
      14license=('Boost')
    
      15source=("http://mcrl2.org/download/release/$pkgname-$pkgver.tar.gz")
    
      16sha256sums=('b3590e2845a24ef0a1a7e9cf51fd3a2366e9a07ef3418e14a271bee506d2e289')
    
      17install=mcrl2.install
    
      18
    
      19build() {
    
      20  mkdir -p $srcdir/$pkgname-$pkgver-build
    
      21  cd $srcdir/$pkgname-$pkgver-build
    
      22  cmake -DCMAKE_INSTALL_RPATH=/usr/lib/mcrl2 $srcdir/$pkgname-$pkgver
    
      23  make $MAKEFLAGS
    
      24}
    
      25
    
      26package() {
    
      27  cd $srcdir/$pkgname-$pkgver-build
    
      28  cmake -DCMAKE_INSTALL_PREFIX=${pkgdir}/usr -P cmake_install.cmake
    
      29}
    
      30

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 15:49:13	MEDIUM	1