mingw-w64-paraview-qt6

LOW

maintainer xantares 0 votes scanned 2026-10-24 00:14:55.209548

View on AUR

Why flagged

The download in prepare() fetches a patch from the project's official GitLab instance over HTTPS, which is a legitimate and trusted source for development artifacts; the host is not whitelisted but is plausibly official, and the patch is applied to fix a build issue, not executing untrusted code.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The download in prepare() fetches a patch from the project's official GitLab instance over HTTPS, which is a legitimate and trusted source for development artifacts; the host is not whitelisted but is plausibly official, and the patch is applied to fix a build issue, not executing untrusted code.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium External download from an untrusted host, not in source=() external_download_not_in_source

curl/wget fetches a URL on a non-allowlisted host that is not part of source=(), so it is not checksum-verified by makepkg.

PKGBUILD:23 curl -L https://gitlab.kitware.com/paraview/paraview/-/merge_requests/7854.patch -p1

PKGBUILD

1 offending line(s) highlighted

      1pkgname=mingw-w64-paraview-qt6
    
      2pkgver=6.1.1
    
      3pkgrel=1
    
      4pkgdesc='Parallel Visualization Application using VTK (mingw-w64)'
    
      5arch=('any')
    
      6url='https://www.paraview.org'
    
      7license=('custom')
    
      8depends=('mingw-w64-vtk-qt6' 'mingw-w64-qt6-base' 'mingw-w64-qt6-tools' 'mingw-w64-qt6-svg' 'mingw-w64-qt6-5compat' 'mingw-w64-cgns' 'mingw-w64-protobuf')
    
      9makedepends=('mingw-w64-cmake' 'mingw-w64-wine' 'mingw-w64-boost' 'protobuf')
    
      10options=('!buildflags' '!strip' 'staticlibs')
    
      11source=("${url}/files/v${pkgver:0:3}/ParaView-v${pkgver}.tar.xz")
    
      12md5sums=('8dd6919a9afbb5859367f84900d360a3')
    
      13
    
      14_architectures="x86_64-w64-mingw32"
    
      15
    
      16prepare() {
    
      17  cd "${srcdir}/ParaView-v${pkgver}"
    
      18
    
      19  # undefined reference to absl::lts_20250814::log_internal::LogMessageFatal::LogMessageFatal(char const*, int, char const*)
    
      20  echo "target_link_libraries(RemotingServerManager PRIVATE absl_log_internal_message)" >> Remoting/ServerManager/CMakeLists.txt
    
      21
    
      22  # flag to skip hw backends
    
      23  curl -L https://gitlab.kitware.com/paraview/paraview/-/merge_requests/7854.patch -p1
    
      24}
    
      25
    
      26build() {
    
      27  cd "${srcdir}/ParaView-v${pkgver}"
    
      28  for _arch in ${_architectures}; do
    
      29    ${_arch}-cmake \
    
      30      -DCMAKE_BUILD_TYPE=Release \
    
      31      -DPARAVIEW_USE_PYTHON=OFF \
    
      32      -DPARAVIEW_ENABLE_EMBEDDED_DOCUMENTATION=OFF \
    
      33      -DPARAVIEW_PLUGIN_DISABLE_XML_DOCUMENTATION=ON \
    
      34      -DPARAVIEW_USE_VISKORES=OFF \
    
      35      -DPARAVIEW_BUILD_WITH_EXTERNAL=ON \
    
      36      -DPARAVIEW_QT_VERSION=6 \
    
      37      -DPARAVIEW_USE_EXTERNAL_VTK=ON \
    
      38      -B build-${_arch} .
    
      39    WINEPATH="/usr/${_arch}/bin;${PWD}/bin" make -C build-${_arch}
    
      40  done
    
      41}
    
      42
    
      43package() {
    
      44  for _arch in ${_architectures}; do
    
      45    cd "$srcdir"/ParaView-v${pkgver}/build-${_arch}
    
      46    make install/fast DESTDIR="$pkgdir"
    
      47    rm -r "$pkgdir"/usr/${_arch}/share
    
      48    ${_arch}-strip --strip-unneeded "$pkgdir"/usr/${_arch}/bin/*.dll
    
      49    ${_arch}-strip -g "$pkgdir"/usr/${_arch}/lib/*.a
    
      50  done
    
      51}
    
      52

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-24 00:14:55	Low	2
2026-10-23 00:02:19	Low	2
2026-10-22 00:13:10	Low	2
2026-10-21 00:12:50	Low	2
2026-10-20 00:10:31	Low	2
2026-10-19 00:03:55	Low	2
2026-10-18 00:06:55	Low	2
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 00:18:51	Low	2
2026-10-11 00:26:05	Low	2
2026-10-10 00:11:52	Low	2
2026-10-09 00:05:33	Low	2
2026-10-08 00:28:03	Low	2
2026-10-07 00:21:34	Low	2
2026-10-06 00:13:36	Low	2
2026-10-05 00:08:03	Low	2