mips64r5900el-ps2-elf-gcc-stage1

LOW

maintainer tallero 1 votes scanned 2026-11-01 00:21:48.120785

View on AUR

Why flagged

The package builds GCC stage1 from a Git repository on a non-standard host, but it is a known project fork (ps2dev) for a legitimate toolchain; the source is not a prebuilt binary and the risk is limited to supply-chain trust in the fork.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds GCC stage1 from a Git repository on a non-standard host, but it is a known project fork (ps2dev) for a legitimate toolchain; the source is not a prebuilt binary and the risk is limited to supply-chain trust in the fork.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:31 "https://libisl.sourceforge.io/isl-${_islver}.tar.xz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Pellegrino Prevete <pellegrinoprevete@gmail.com>
    
      2
    
      3# shellcheck disable=SC2034
    
      4_module="ee"
    
      5_platform="ps2"
    
      6_target="mips64r5900el-${_platform}"
    
      7target="${_target}-elf"
    
      8_base="toolchain"
    
      9pkgname=("${target}-gcc-stage1")
    
      10pkgver="v10.2.0"
    
      11# pkgver="v11.3.0"
    
      12_islver="0.21"
    
      13pkgrel=1
    
      14_pkgdesc=("The GNU Compiler Collection. Stage 1 for toolchain building (${target}).")
    
      15pkgdesc="${_pkgdesc[*]}"
    
      16arch=('x86_64')
    
      17license=('BSD')
    
      18_github="https://github.com/ps2dev"
    
      19_local="ssh://git@127.0.0.1:/home/git"
    
      20url="${_github}/gcc"
    
      21makedepends=("${target}-binutils"
    
      22             "libgmp-static"
    
      23             "mpfr-static"
    
      24             "libmpc-static"
    
      25             "zstd-static")
    
      26provides=("${target}-gcc")
    
      27optdepends=()
    
      28_branch="${_module}-${pkgver}"
    
      29_commit="331453616ac96717cfef82d21c03573c8984f17d"
    
      30source=("${pkgname}::git+${url}#commit=${_commit}"
    
      31        "https://libisl.sourceforge.io/isl-${_islver}.tar.xz")
    
      32# source=("${pkgname}::git+${_local}/${_platform}-gcc#commit=${_branch}")
    
      33sha256sums=('SKIP'
    
      34            'SKIP')
    
      35
    
      36_n_cpu="$(getconf _NPROCESSORS_ONLN)"
    
      37_make_opts=(-j "${_n_cpu}")
    
      38
    
      39cflags=(-static
    
      40        -O2
    
      41        -Wno-implicit-function-declaration)
    
      42
    
      43ldflags=(${LDFLAGS}
    
      44         -Bstatic
    
      45         -s)
    
      46
    
      47prepare() {
    
      48  cd "${srcdir}/${pkgname}" || exit
    
      49  rm "isl" || true
    
      50  ln -s "../isl-${_islver}" "isl"
    
      51}
    
      52
    
      53# shellcheck disable=SC2154
    
      54build() {
    
      55  local _target
    
      56
    
      57  CFLAGS=""
    
      58  CXXFLAGS=""
    
      59  CPPFLAGS=""
    
      60  LDFLAGS=""
    
      61  export CFLAGS
    
      62  export CXXFLAGS
    
      63  export CPPFLAGS
    
      64  export LDFLAGS
    
      65
    
      66  local _cflags=(${cflags[@]}
    
      67                 -I/usr/include)
    
      68                 # -std=gnu++98)
    
      69
    
      70  local _ldflags=(${ldflags[@]})
    
      71                  # -ldl)
    
      72
    
      73  local _build_opts=(${_make_opts[@]}
    
      74                     CFLAGS="${_cflags[*]}"
    
      75                     CPPFLAGS="${_cflags[*]}"
    
      76                     # CXXFLAGS="${_cflags[*]}"
    
      77                     LDFLAGS="${_ldflags[*]}")
    
      78
    
      79  cd "${srcdir}/${pkgname}"
    
      80
    
      81  for _target in "${target}"; do
    
      82    rm -rf "build-${_target}"
    
      83    mkdir -p "build-${_target}"
    
      84    cd "build-${_target}"
    
      85    local _configure_opts=(--prefix="/usr"
    
      86                           --target="${_target}"
    
      87                           --host=${CHOST}
    
      88                           --build=${CHOST}
    
      89                           --enable-languages="c"
    
      90                           --with-float=hard
    
      91                           --without-headers
    
      92                           --without-newlib
    
      93                           --disable-libssp
    
      94                           --with-isl
    
      95                           --disable-multilib
    
      96                           --disable-tls)
    
      97
    
      98    "../configure" "${_configure_opts[@]}"
    
      99
    
      100    make "${_build_opts[@]}" all
    
      101    cd ..
    
      102  done
    
      103}
    
      104
    
      105# shellcheck disable=SC2154
    
      106package() {
    
      107  local _target
    
      108  cd "${srcdir}/${pkgname}"
    
      109  for _target in "${target}"; do
    
      110    cd "build-${_target}"
    
      111    make DESTDIR="${pkgdir}" "${_make_opts[@]}" install-strip
    
      112    cd ..
    
      113  done
    
      114}
    
      115

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-01 00:21:48	Low	2
2026-10-31 00:07:41	Low	2
2026-10-30 00:29:30	Low	2
2026-10-29 00:13:55	Low	2
2026-10-28 00:06:54	Low	2
2026-10-27 00:23:28	Low	2
2026-10-26 00:12:40	Low	2
2026-10-25 00:20:48	Low	2
2026-10-24 00:14:55	Low	2
2026-10-23 00:02:19	Low	2
2026-10-22 00:13:10	Low	2
2026-10-21 00:12:50	Low	2
2026-10-20 00:10:31	Low	2
2026-10-19 00:03:55	Low	2
2026-10-18 00:06:55	Low	2
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2