mingw-w64-scipoptsuite

LOW
maintainer orphaned 0 votes scanned 2026-09-17 00:27:14.276658
View on AUR
Why flagged

The source is a standard release tarball from the project's official domain (scip.zib.de), which is plausibly the project's own infrastructure; building from official project sources is normal for AUR packages, even if the host is not on a whitelist.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a standard release tarball from the project's official domain (scip.zib.de), which is plausibly the project's own infrastructure; building from official project sources is normal for AUR packages, even if the host is not on a whitelist.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:11 source=("http://scip.zib.de/download/release/scipoptsuite-${pkgver}.tgz")

PKGBUILD

1 offending line(s) highlighted
1pkgname=mingw-w64-scipoptsuite
2pkgver=7.0.3
3pkgrel=1
4pkgdesc="Toolbox for generating and solving optimization problems. (mingw-w64)"
5arch=('any')
6url='http://scip.zib.de'
7license=('LGPL3' 'custom:ZIB Academic License')
8depends=('mingw-w64-gmp' 'mingw-w64-readline' 'mingw-w64-regex' 'mingw-w64-zlib' 'mingw-w64-gsl' 'mingw-w64-coin-or-ipopt' 'mingw-w64-onetbb')
9makedepends=('mingw-w64-cmake')
10options=('staticlibs' '!strip' '!buildflags')
11source=("http://scip.zib.de/download/release/scipoptsuite-${pkgver}.tgz")
12sha256sums=('5af5185a6e60cc62d1a89e3ac4fe22d32351a5158c2c04a95e180e76eb98cc07')
13
14_architectures="i686-w64-mingw32 x86_64-w64-mingw32"
15
16build() {
17 cd "${srcdir}/scipoptsuite-${pkgver}"
18 for _arch in ${_architectures}; do
19 mkdir -p build-${_arch} && pushd build-${_arch}
20 ${_arch}-cmake -Dlibs="regex;gfortran" -DGCG=OFF -DIPOPT_DIR=/usr/${_arch}/ -DBUILD_TESTING=OFF ..
21 make
22 popd
23 done
24}
25
26package() {
27 for _arch in ${_architectures}; do
28 cd "${srcdir}/scipoptsuite-${pkgver}/build-${_arch}"
29 make install
30 ${_arch}-strip --strip-unneeded "$pkgdir"/usr/${_arch}/bin/*.dll
31 ${_arch}-strip -g "$pkgdir"/usr/${_arch}/lib/*.a
32 done
33}
34
35

Scan history

Scanned at (UTC)SeverityRules
2026-09-17 00:27:14 Low 2
2026-09-16 00:03:17 Low 2
2026-09-15 00:25:31 Low 2
2026-09-14 00:27:57 Low 2
2026-09-13 00:19:54 Low 2
2026-09-12 00:25:17 Low 2
2026-09-11 00:19:22 Low 2
2026-09-10 00:22:44 Low 2
2026-09-09 00:04:09 Low 2
2026-09-08 00:18:08 Low 2
2026-09-07 00:30:15 Low 2
2026-09-06 00:17:06 Low 2
2026-09-05 00:16:27 Low 2
2026-09-04 00:03:13 Low 2
2026-09-03 00:15:47 Low 2
2026-09-02 00:02:31 Low 2
2026-09-01 00:11:19 Low 2
2026-08-31 00:19:57 Low 2
2026-08-30 00:04:14 Low 2
2026-08-29 00:29:17 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion