mingw-w64-mpfr

MEDIUM
maintainer xantares 7 votes scanned 2026-09-03 17:54:21.348771
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:12 source=(http://www.mpfr.org/mpfr-${_pkgver}/mpfr-${_pkgver}.tar.xz{,.asc})

PKGBUILD

1 offending line(s) highlighted
1pkgname=mingw-w64-mpfr
2_pkgver=4.2.2
3pkgver=$_pkgver
4pkgrel=1
5pkgdesc="Multiple-precision floating-point library (mingw-w64)"
6arch=(any)
7url="http://www.mpfr.org"
8license=("LGPL")
9makedepends=('mingw-w64-configure')
10depends=("mingw-w64-gmp")
11options=('staticlibs' '!strip' '!buildflags')
12source=(http://www.mpfr.org/mpfr-${_pkgver}/mpfr-${_pkgver}.tar.xz{,.asc})
13sha256sums=('b67ba0383ef7e8a8563734e2e889ef5ec3c3b898a01d00fa0a6869ad81c6ce01'
14 'SKIP')
15validpgpkeys=('07F3DBBECC1A39605078094D980C197698C3739D'
16 'A534BE3F83E241D918280AEB5831D11A0D4DB02A') # Vincent Lefevre <vincent@vinc17.net>
17
18_architectures="i686-w64-mingw32 x86_64-w64-mingw32"
19
20prepare() {
21 cd "$srcdir"/mpfr-${_pkgver}
22}
23
24build() {
25 cd "$srcdir"/mpfr-${_pkgver}
26 for _arch in ${_architectures}; do
27 mkdir -p build-${_arch} && pushd build-${_arch}
28 export WINEARCH=foo
29 ${_arch}-configure \
30 --enable-shared \
31 --disable-static \
32 --enable-thread-safe
33 make
34 popd
35 done
36}
37
38package() {
39 for _arch in ${_architectures}; do
40 cd "${srcdir}/mpfr-${_pkgver}/build-${_arch}"
41 make DESTDIR="$pkgdir" install
42 rm -r "$pkgdir"/usr/${_arch}/share
43 ${_arch}-strip --strip-unneeded "$pkgdir"/usr/${_arch}/bin/*.dll
44 ${_arch}-strip -g "$pkgdir"/usr/${_arch}/lib/*.a
45 done
46}
47

Scan history

Scanned at (UTC)SeverityRules
2026-09-03 17:54:21 Medium 1
2026-06-19 19:07:35 Clean 2
2026-06-18 16:11:54 Medium 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion