mingw-w64-mesa
LOW
maintainer xantares
0 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The source is a tarball from the official mesa3d.org project archive, building the project's own source code; the non-whitelisted host is plausibly official, and this is a normal AUR build pattern with no execution of prebuilt binaries.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the official mesa3d.org project archive, building the project's own source code; the non-whitelisted host is plausibly official, and this is a normal AUR build pattern with no execution of prebuilt binaries.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:19
source=(https://archive.mesa3d.org/mesa-$pkgver.tar.xz{,.sig})
PKGBUILD
1 offending line(s) highlighted
1
pkgname=mingw-w64-mesa
2
pkgver=26.2.1
3
pkgrel=1
4
pkgdesc="Open-source OpenGL drivers (mingw-w64)"
5
arch=('any')
6
url="https://www.mesa3d.org/"
7
license=("MIT AND BSD-3-Clause AND SGI-B-2.0")
8
makedepends=('mingw-w64-meson' 'mingw-w64-cmake' 'mingw-w64-directx-headers' 'python-mako' 'python-packaging' 'python-yaml' 'glslang')
9
depends=('mingw-w64-llvm' 'mingw-w64-vulkan-icd-loader' 'mingw-w64-dlfcn')
10
options=('staticlibs' '!strip' '!buildflags')
11
validpgpkeys=(
12
946D09B5E4C9845E63075FF1D961C596A7203456 # Andres Gomez <tanty@igalia.com>
13
71C4B75620BC75708B4BDB254C95FAAB3EB073EC # Dylan Baker <dylan@pnwbakers.com>
14
8703B6700E7EE06D7A39B8D6EDAE37B02CEB490D # Emil Velikov <emil.l.velikov@gmail.com>
15
57551DE15B968F6341C248F68D8E31AFC32428A6 # Eric Engestrom <eric@engestrom.ch>
16
A5CC9FEC93F2F837CB044912336909B6B25FADFA # Juan A. Suarez Romero <jasuarez@igalia.com>
17
E3E8F480C52ADD73B278EE78E1ECBE07D7D70895 # Juan Antonio Suárez Romero (Igalia, S.L.) <jasuarez@igalia.com>
18
)
19
source=(https://archive.mesa3d.org/mesa-$pkgver.tar.xz{,.sig})
20
sha256sums=('c47e81bddc4760360a41ac3c5acec38acb81f9d750ecef47e7f3adc7021a4442'
21
'SKIP')
22
23
_architectures="i686-w64-mingw32 x86_64-w64-mingw32"
24
25
prepare () {
26
cd "${srcdir}"/mesa-${pkgver}
27
}
28
29
build() {
30
cd "${srcdir}"/mesa-${pkgver}
31
for _arch in ${_architectures}; do
32
${_arch}-meson build-${_arch} -Db_lto=false -Dgallium-drivers=softpipe,llvmpipe,zink -Dvulkan-drivers=swrast -Degl=enabled -Dgles1=enabled -Dgles2=enabled -Dvulkan-icd-dir=bin --includedir=include/mesa
33
ninja -C build-${_arch} ${MAKEFLAGS}
34
done
35
}
36
37
package() {
38
cd "${srcdir}"/mesa-${pkgver}
39
for _arch in ${_architectures}; do
40
DESTDIR="$pkgdir" ninja -C build-${_arch} install
41
rm -r "$pkgdir"/usr/${_arch}/lib
42
${_arch}-strip --strip-unneeded "$pkgdir"/usr/${_arch}/bin/*.dll
43
done
44
}
45
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |