mingw-w64-mesa
maintainer xantares
· 0 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The source is a tarball from the official project's archive domain (archive.mesa3d.org), which is plausibly controlled by the project maintainers; building from this source is standard practice and not inherently dangerous, despite the host not being on a whitelist.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the official project's archive domain (archive.mesa3d.org), which is plausibly controlled by the project maintainers; building from this source is standard practice and not inherently dangerous, despite the host not being on a whitelist.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:19
source=(https://archive.mesa3d.org/mesa-$pkgver.tar.xz{,.sig})
PKGBUILD
1 offending line(s) highlighted
1
pkgname=mingw-w64-mesa
2
pkgver=26.1.4
3
pkgrel=1
4
pkgdesc="Open-source OpenGL drivers (mingw-w64)"
5
arch=('any')
6
url="https://www.mesa3d.org/"
7
license=("MIT AND BSD-3-Clause AND SGI-B-2.0")
8
makedepends=('mingw-w64-meson' 'mingw-w64-cmake' 'mingw-w64-directx-headers' 'python-mako' 'python-packaging' 'python-yaml' 'glslang')
9
depends=('mingw-w64-llvm' 'mingw-w64-vulkan-icd-loader' 'mingw-w64-dlfcn')
10
options=('staticlibs' '!strip' '!buildflags')
11
validpgpkeys=(
12
946D09B5E4C9845E63075FF1D961C596A7203456 # Andres Gomez <tanty@igalia.com>
13
71C4B75620BC75708B4BDB254C95FAAB3EB073EC # Dylan Baker <dylan@pnwbakers.com>
14
8703B6700E7EE06D7A39B8D6EDAE37B02CEB490D # Emil Velikov <emil.l.velikov@gmail.com>
15
57551DE15B968F6341C248F68D8E31AFC32428A6 # Eric Engestrom <eric@engestrom.ch>
16
A5CC9FEC93F2F837CB044912336909B6B25FADFA # Juan A. Suarez Romero <jasuarez@igalia.com>
17
E3E8F480C52ADD73B278EE78E1ECBE07D7D70895 # Juan Antonio Suárez Romero (Igalia, S.L.) <jasuarez@igalia.com>
18
)
19
source=(https://archive.mesa3d.org/mesa-$pkgver.tar.xz{,.sig})
20
sha256sums=('072705caa9adf4740f1489194b13e278ad959166863b5271fe423a86353c9ab6'
21
'SKIP')
22
23
_architectures="i686-w64-mingw32 x86_64-w64-mingw32"
24
25
prepare () {
26
cd "${srcdir}"/mesa-${pkgver}
27
}
28
29
build() {
30
cd "${srcdir}"/mesa-${pkgver}
31
for _arch in ${_architectures}; do
32
${_arch}-meson build-${_arch} -Db_lto=false -Dgallium-drivers=softpipe,llvmpipe,zink -Dvulkan-drivers=swrast -Degl=enabled -Dgles1=enabled -Dgles2=enabled -Dvulkan-icd-dir=bin --includedir=include/mesa
33
ninja -C build-${_arch} ${MAKEFLAGS}
34
done
35
}
36
37
package() {
38
cd "${srcdir}"/mesa-${pkgver}
39
for _arch in ${_architectures}; do
40
DESTDIR="$pkgdir" ninja -C build-${_arch} install
41
rm -r "$pkgdir"/usr/${_arch}/lib
42
${_arch}-strip --strip-unneeded "$pkgdir"/usr/${_arch}/bin/*.dll
43
done
44
}
45
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |
| 2026-07-15 00:09:25 | LOW | 2 |