mingw-w64-paraview-git

MEDIUM
maintainer xantares 0 votes scanned 2026-08-22 09:16:51.748650
View on AUR
Why flagged

curl/wget fetches a URL on a non-allowlisted host that is not part of source=(), so it is not checksum-verified by makepkg.

Triggered rules

Medium External download from an untrusted host, not in source=() external_download_not_in_source

curl/wget fetches a URL on a non-allowlisted host that is not part of source=(), so it is not checksum-verified by makepkg.

  • PKGBUILD:46 curl -L https://gitlab.kitware.com/paraview/paraview/-/merge_requests/7922.patch | patch -p1
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:13 source=("git+https://gitlab.kitware.com/paraview/paraview.git"

PKGBUILD

2 offending line(s) highlighted
1pkgname=mingw-w64-paraview-git
2pkgver=r86744.72df957f2c
3pkgrel=1
4pkgdesc='Parallel Visualization Application using VTK (mingw-w64)'
5arch=('any')
6url='https://www.paraview.org'
7license=('custom')
8depends=('mingw-w64-qt5-base' 'mingw-w64-qt5-tools' 'mingw-w64-qt5-svg' 'mingw-w64-freetype2' 'mingw-w64-libxml2' 'mingw-w64-libtiff' 'mingw-w64-jsoncpp' 'mingw-w64-hdf5' 'mingw-w64-lz4' 'mingw-w64-proj' 'mingw-w64-cgns' 'mingw-w64-netcdf' 'mingw-w64-double-conversion' 'mingw-w64-protobuf' 'mingw-w64-libtheora' 'mingw-w64-pugixml' 'mingw-w64-gl2ps' 'mingw-w64-libharu' 'mingw-w64-verdict' 'mingw-w64-scnlib')
9makedepends=('mingw-w64-cmake' 'mingw-w64-wine' 'mingw-w64-boost' 'protobuf' 'git' 'ninja-makeflags')
10provides=('mingw-w64-paraview')
11conflicts=('mingw-w64-paraview')
12options=('!buildflags' '!strip' 'staticlibs')
13source=("git+https://gitlab.kitware.com/paraview/paraview.git"
14 "git+https://gitlab.kitware.com/vtk/vtk.git"
15 "git+https://gitlab.kitware.com/paraview/visitbridge.git"
16 "git+https://gitlab.kitware.com/paraview/icet.git"
17 "git+https://gitlab.kitware.com/paraview/qttesting.git")
18sha256sums=('SKIP' 'SKIP' 'SKIP' 'SKIP' 'SKIP')
19
20_architectures="x86_64-w64-mingw32"
21
22pkgver () {
23 cd "${srcdir}/paraview"
24 printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
25}
26
27prepare() {
28 cd "${srcdir}/paraview"
29 git submodule init
30 git config submodule.VTK.url "$srcdir"/vtk
31 git config submodule.Utilities/VisItBridge.git "$srcdir"/visitbridge
32 git config submodule.ThirdParty/IceT/vtkicet.git "$srcdir"/icet
33 git config submodule.ThirdParty/QtTesting/vtkqttesting.git "$srcdir"/qttesting
34 git -c protocol.file.allow=always submodule update -f --init
35
36 # https://gitlab.kitware.com/cmake/cmake/-/issues/25079
37 # undefined reference to absl::lts_20250814::log_internal::LogMessageFatal::LogMessageFatal(char const*, int, char const*)
38 echo "target_link_libraries(vtkRemotingServerManager PRIVATE absl_log_internal_message)" >> Remoting/ServerManager/CMakeLists.txt
39
40 # absl/types/compare.h:60:12: error: 'partial_ordering' has not been declared in 'std'
41 # abseil assumes client code use a higher c++ standard than how it was itself compiled (gcc default=c++20, paraview=c++17) and sets ABSL_OPTION_USE_STD_ORDERING=1
42 # locally override abseil options.h to force ABSL_OPTION_USE_STD_ORDERING=0, keep other settings to their defaults
43 #echo "target_compile_definitions(vtkRemotingServerManager PRIVATE ABSL_BASE_OPTIONS_H_ ABSL_OPTION_USE_STD_SOURCE_LOCATION=1 ABSL_OPTION_USE_STD_ORDERING=0 ABSL_OPTION_USE_INLINE_NAMESPACE=1 ABSL_OPTION_INLINE_NAMESPACE_NAME=lts_20260526 ABSL_OPTION_HARDENED=0 ABSL_OPTION_INLINE_HW_ACCEL_STRATEGY=0)" >> Remoting/ServerManager/CMakeLists.txt
44
45 # qt5
46 curl -L https://gitlab.kitware.com/paraview/paraview/-/merge_requests/7922.patch | patch -p1
47}
48
49build() {
50 cd "${srcdir}/paraview"
51 for _arch in ${_architectures}; do
52 ${_arch}-cmake -G Ninja \
53 -DCMAKE_MAKE_PROGRAM=/usr/bin/ninja-makeflags \
54 -DCMAKE_BUILD_TYPE=Release \
55 -DPARAVIEW_BUILD_SHARED_LIBS=ON -UBUILD_SHARED_LIBS \
56 -DPARAVIEW_USE_PYTHON=OFF \
57 -DPARAVIEW_ENABLE_EMBEDDED_DOCUMENTATION=OFF \
58 -DPARAVIEW_PLUGIN_DISABLE_XML_DOCUMENTATION=ON \
59 -DPARAVIEW_USE_VISKORES=OFF \
60 -DPARAVIEW_BUILD_WITH_EXTERNAL=ON \
61 -DPARAVIEW_QT_VERSION=5 \
62 -DVTK_QT_VERSION=5 \
63 -DVTK_MODULE_USE_EXTERNAL_VTK_ioss=OFF \
64 -DVTK_MODULE_USE_EXTERNAL_VTK_cli11=OFF \
65 -DVTK_MODULE_USE_EXTERNAL_VTK_eigen=OFF \
66 -DVTK_MODULE_USE_EXTERNAL_VTK_exprtk=OFF \
67 -DVTK_MODULE_USE_EXTERNAL_VTK_fast_float=OFF \
68 -DVTK_MODULE_USE_EXTERNAL_VTK_fmt=OFF \
69 -DVTK_MODULE_USE_EXTERNAL_VTK_nlohmannjson=OFF \
70 -DVTK_MODULE_USE_EXTERNAL_VTK_pegtl=OFF \
71 -DVTK_MODULE_USE_EXTERNAL_VTK_token=OFF \
72 -DVTK_MODULE_USE_EXTERNAL_VTK_utf8=OFF \
73 -B build-${_arch} .
74 WINEPATH="/usr/${_arch}/bin;${PWD}/bin" cmake --build build-${_arch}
75 done
76}
77
78package() {
79 cd "$srcdir"/paraview/
80 for _arch in ${_architectures}; do
81 DESTDIR="$pkgdir" cmake --install build-${_arch}
82 rm -r "$pkgdir"/usr/${_arch}/share
83 ${_arch}-strip --strip-unneeded "$pkgdir"/usr/${_arch}/bin/*.dll
84 ${_arch}-strip -g "$pkgdir"/usr/${_arch}/lib/*.a
85 done
86}
87

Changes since previous scan

--- PKGBUILD @ 2026-07-02 18:47
+++ PKGBUILD @ 2026-08-22 09:16
@@ -1,5 +1,5 @@
pkgname=mingw-w64-paraview-git
-pkgver=r86235.9b9fca7d93
+pkgver=r86744.72df957f2c
pkgrel=1
pkgdesc='Parallel Visualization Application using VTK (mingw-w64)'
arch=('any')
@@ -41,6 +41,9 @@
# abseil assumes client code use a higher c++ standard than how it was itself compiled (gcc default=c++20, paraview=c++17) and sets ABSL_OPTION_USE_STD_ORDERING=1
# locally override abseil options.h to force ABSL_OPTION_USE_STD_ORDERING=0, keep other settings to their defaults
#echo "target_compile_definitions(vtkRemotingServerManager PRIVATE ABSL_BASE_OPTIONS_H_ ABSL_OPTION_USE_STD_SOURCE_LOCATION=1 ABSL_OPTION_USE_STD_ORDERING=0 ABSL_OPTION_USE_INLINE_NAMESPACE=1 ABSL_OPTION_INLINE_NAMESPACE_NAME=lts_20260526 ABSL_OPTION_HARDENED=0 ABSL_OPTION_INLINE_HW_ACCEL_STRATEGY=0)" >> Remoting/ServerManager/CMakeLists.txt
+
+ # qt5
+ curl -L https://gitlab.kitware.com/paraview/paraview/-/merge_requests/7922.patch | patch -p1
}
build() {

Scan history

Scanned at (UTC)SeverityRules
2026-08-22 09:16:51 Medium 2
2026-07-02 18:47:07 Clean 2
2026-06-19 19:07:35 Clean 3
2026-06-18 18:55:24 Clean 3
2026-06-18 16:11:54 Medium 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion