mingw-w64-boost
maintainer xantares
· 19 votes
· scanned 2026-08-18 00:03:42.021799
LOW
View on AUR ↗
Why flagged
The source is a standard tarball from the official Boost project's archives domain, which is plausibly project-owned despite not being on the whitelist; building from official source is normal AUR packaging behavior.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a standard tarball from the official Boost project's archives domain, which is plausibly project-owned despite not being on the whitelist; building from official source is normal AUR packaging behavior.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:12
source=("https://archives.boost.io/release/${pkgver}/source/boost_${_boostver}.tar.bz2")
PKGBUILD
1 offending line(s) highlighted
1
pkgname=mingw-w64-boost
2
pkgver=1.91.0
3
_boostver=${pkgver//./_}
4
pkgrel=1
5
pkgdesc="Free peer-reviewed portable C++ source libraries (mingw-w64)"
6
arch=('any')
7
url="http://www.boost.org/"
8
license=('BSL-1.0')
9
depends=('mingw-w64-zstd' 'mingw-w64-bzip2' 'mingw-w64-dlfcn')
10
makedepends=('mingw-w64-gcc' 'mingw-w64-wine' 'mingw-w64-environment')
11
options=('!strip' '!buildflags' 'staticlibs')
12
source=("https://archives.boost.io/release/${pkgver}/source/boost_${_boostver}.tar.bz2")
13
sha256sums=('de5e6b0e4913395c6bdfa90537febd9028ea4c0735d2cdb0cd9b45d5f51264f5')
14
15
_architectures="32:i686-w64-mingw32 64:x86_64-w64-mingw32"
16
17
prepare() {
18
# https://github.com/boostorg/cobalt/commit/cba276884d3fc5509475910283091a0031970f1f
19
curl -L https://github.com/boostorg/cobalt/commit/cba2768.patch | patch -p1 -d boost_${_boostver}/libs/cobalt
20
21
for _arch in ${_architectures}; do
22
source mingw-env "${_arch:3}"
23
24
rm -rf build-${_arch:3}
25
cp -r boost_${_boostver} build-${_arch:3}
26
pushd build-${_arch:3}
27
28
cat > user-config.jam << EOF
29
using gcc : mingw64 : ${CXX}
30
:
31
<rc>${_arch:3}-windres
32
<archiver>${_arch:3}-ar
33
;
34
EOF
35
./bootstrap.sh --with-toolset=gcc
36
popd
37
done
38
}
39
40
package() {
41
cd "${srcdir}"
42
for _arch in ${_architectures}; do
43
source mingw-env "${_arch:3}"
44
pushd "build-${_arch:3}"
45
LD_PRELOAD="" ./b2 -d2 -q ${MAKEFLAGS} \
46
target-os=windows \
47
variant=release \
48
threading=multi \
49
threadapi=win32 \
50
link=shared,static \
51
runtime-link=shared \
52
--prefix=${pkgdir}/usr/${_arch:3} \
53
--user-config=user-config.jam \
54
--without-python --without-mpi --without-graph_parallel \
55
cxxflags="${CXXFLAGS}" \
56
linkflags="${LDFLAGS}" \
57
address-model=${_arch:0:2} \
58
architecture=x86 \
59
binary-format=pe \
60
abi=ms \
61
-l0 ${MAKEFLAGS} \
62
--layout=system install
63
install -d $pkgdir/usr/${_arch:3}/bin
64
mv "$pkgdir"/usr/${_arch:3}/lib/*.dll "$pkgdir"/usr/${_arch:3}/bin
65
${_arch:3}-strip --strip-unneeded "$pkgdir"/usr/${_arch:3}/bin/*.dll
66
${_arch:3}-strip -g "$pkgdir"/usr/${_arch:3}/lib/*.a
67
popd
68
done
69
}
70
Changes since previous scan
--- PKGBUILD @ 2026-06-19 19:07+++ PKGBUILD @ 2026-08-18 00:03@@ -15,6 +15,9 @@ _architectures="32:i686-w64-mingw32 64:x86_64-w64-mingw32" prepare() {+ # https://github.com/boostorg/cobalt/commit/cba276884d3fc5509475910283091a0031970f1f+ curl -L https://github.com/boostorg/cobalt/commit/cba2768.patch | patch -p1 -d boost_${_boostver}/libs/cobalt+ for _arch in ${_architectures}; do source mingw-env "${_arch:3}" Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-18 00:03:42 | LOW | 2 |
| 2026-08-17 09:35:23 | MEDIUM | 1 |
| 2026-08-17 00:18:29 | LOW | 2 |
| 2026-08-16 17:33:23 | MEDIUM | 1 |
| 2026-06-19 19:07:35 | CLEAN | 2 |
| 2026-06-18 16:11:54 | MEDIUM | 1 |