mingw-w64-opencascade

maintainer CloverGit · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a tarball from the official project's Git repository (opencascade.org), hosted on a plausible project-owned domain (git.dev.opencascade.org), building the project's own source code; the non-whitelisted host is not a security risk in this context.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the official project's Git repository (opencascade.org), hosted on a plausible project-owned domain (git.dev.opencascade.org), building the project's own source code; the non-whitelisted host is not a security risk in this context.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:15 source=("opencascade-${pkgver}.tgz::https://git.dev.opencascade.org/gitweb/?p=occt.git;a=snapshot;h=refs/tags/${_pkgver};sf=tgz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: CloverGit <clovergit@hotmail.com>
    
      2# Contributor: Michel Zou
    
      3pkgname=mingw-w64-opencascade
    
      4pkgver=7.8.1
    
      5_pkgver=V7_8_1
    
      6pkgrel=1
    
      7pkgdesc="Open CASCADE Technology, 3D modeling & numerical simulation (mingw-w64)"
    
      8arch=('any')
    
      9url="https://www.opencascade.org"
    
      10license=('custom')
    
      11depends=('mingw-w64-tk' 'mingw-w64-ffmpeg' 'mingw-w64-freeimage' 'mingw-w64-onetbb' 'mingw-w64-rapidjson')
    
      12#TODO: 'mingw-w64-vtk'
    
      13makedepends=('mingw-w64-cmake')
    
      14options=('!buildflags' '!strip' 'staticlibs')
    
      15source=("opencascade-${pkgver}.tgz::https://git.dev.opencascade.org/gitweb/?p=occt.git;a=snapshot;h=refs/tags/${_pkgver};sf=tgz"
    
      16	'fix-install-dir-references.patch')
    
      17sha256sums=('33f2bdb67e3f6ae469f3fa816cfba34529a23a9cb736bf98a32b203d8531c523'
    
      18            'afb584aa453993ae8d9e2b983594558531ede735a5892754b812be30650c9fb5')
    
      19
    
      20_architectures="i686-w64-mingw32 x86_64-w64-mingw32"
    
      21
    
      22prepare() {
    
      23	cd "occt-${_pkgver}"
    
      24	# patch -Np1 -i "$srcdir/fix-install-dir-references.patch"
    
      25
    
      26	# cross paths
    
      27	sed -i "s|CMAKE_FIND_ROOT_PATH_BOTH||g" adm/cmake/*.cmake
    
      28	sed -i "s|NO_DEFAULT_PATH||g" adm/cmake/*.cmake
    
      29
    
      30	# wrong lib name .
    
      31	sed -i "s|CSF_FreeImagePlus|FreeImage|g" adm/cmake/freeimage.cmake
    
      32
    
      33	# dont ignore linker flags
    
      34	sed -i 's|set (CMAKE_SHARED_LINKER_FLAGS "-Wl,--export-all-symbols")|set (CMAKE_SHARED_LINKER_FLAGS "-Wl,--export-all-symbols \${CMAKE_SHARED_LINKER_FLAGS}")|g' adm/cmake/occt_defs_flags.cmake
    
      35
    
      36	# find .dll.a extension
    
      37	sed -i 's|set (CMAKE_FIND_LIBRARY_SUFFIXES |#set (CMAKE_FIND_LIBRARY_SUFFIXES |g' adm/cmake/*.cmake
    
      38}
    
      39
    
      40build() {
    
      41	cd "occt-${_pkgver}"
    
      42	for _arch in ${_architectures}; do
    
      43		mkdir -p build-${_arch} && pushd build-${_arch}
    
      44		${_arch}-cmake \
    
      45			-DCMAKE_BUILD_TYPE=Release \
    
      46			-DUSE_FREEIMAGE=ON \
    
      47			-DUSE_FFMPEG=ON \
    
      48			-DUSE_VTK=OFF \
    
      49			-DUSE_RAPIDJSON=ON \
    
      50			-DUSE_TBB=ON \
    
      51			-DBUILD_DOC_Overview=OFF \
    
      52			-DUSE_TBB=OFF \
    
      53			-DUSE_FFMPEG=OFF \
    
      54			-DINSTALL_DIR_BIN=bin \
    
      55			-DINSTALL_DIR_LIB=lib \
    
      56			-DINSTALL_DIR_DATA=share/opencascade/data \
    
      57			-DINSTALL_DIR_CMAKE=lib/cmake \
    
      58			-DINSTALL_DIR_INCLUDE=include \
    
      59			-DINSTALL_DIR_SAMPLES=share/opencascade/samples \
    
      60			-DINSTALL_DIR_SCRIPT=share/opencascade/script \
    
      61			-DINSTALL_DIR_RESOURCE=share/opencascade/resources \
    
      62			..
    
      63		make
    
      64		popd
    
      65	done
    
      66}
    
      67
    
      68package() {
    
      69	for _arch in ${_architectures}; do
    
      70		cd "$srcdir/occt-${_pkgver}/build-${_arch}"
    
      71		make install DESTDIR="$pkgdir"
    
      72		rm "$pkgdir"/usr/${_arch}/*.txt
    
      73		rm "$pkgdir"/usr/${_arch}/bin/*.exe
    
      74		${_arch}-strip --strip-unneeded "$pkgdir"/usr/${_arch}/bin/*.dll
    
      75		${_arch}-strip -g "$pkgdir"/usr/${_arch}/lib/*.a
    
      76	done
    
      77}
    
      78# vim: set sw=2 ts=2 et:
    
      79

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2