mips64r5900el-ps2-elf-gcc-stage1

LOW

maintainer tallero 1 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The package builds GCC stage1 from a Git repository on a non-standard host, but it is a known project fork (ps2dev) for a legitimate toolchain; the source is not a prebuilt binary and the risk is limited to supply-chain trust in the fork.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds GCC stage1 from a Git repository on a non-standard host, but it is a known project fork (ps2dev) for a legitimate toolchain; the source is not a prebuilt binary and the risk is limited to supply-chain trust in the fork.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:31 "https://libisl.sourceforge.io/isl-${_islver}.tar.xz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Pellegrino Prevete <pellegrinoprevete@gmail.com>
    
      2
    
      3# shellcheck disable=SC2034
    
      4_module="ee"
    
      5_platform="ps2"
    
      6_target="mips64r5900el-${_platform}"
    
      7target="${_target}-elf"
    
      8_base="toolchain"
    
      9pkgname=("${target}-gcc-stage1")
    
      10pkgver="v10.2.0"
    
      11# pkgver="v11.3.0"
    
      12_islver="0.21"
    
      13pkgrel=1
    
      14_pkgdesc=("The GNU Compiler Collection. Stage 1 for toolchain building (${target}).")
    
      15pkgdesc="${_pkgdesc[*]}"
    
      16arch=('x86_64')
    
      17license=('BSD')
    
      18_github="https://github.com/ps2dev"
    
      19_local="ssh://git@127.0.0.1:/home/git"
    
      20url="${_github}/gcc"
    
      21makedepends=("${target}-binutils"
    
      22             "libgmp-static"
    
      23             "mpfr-static"
    
      24             "libmpc-static"
    
      25             "zstd-static")
    
      26provides=("${target}-gcc")
    
      27optdepends=()
    
      28_branch="${_module}-${pkgver}"
    
      29_commit="331453616ac96717cfef82d21c03573c8984f17d"
    
      30source=("${pkgname}::git+${url}#commit=${_commit}"
    
      31        "https://libisl.sourceforge.io/isl-${_islver}.tar.xz")
    
      32# source=("${pkgname}::git+${_local}/${_platform}-gcc#commit=${_branch}")
    
      33sha256sums=('SKIP'
    
      34            'SKIP')
    
      35
    
      36_n_cpu="$(getconf _NPROCESSORS_ONLN)"
    
      37_make_opts=(-j "${_n_cpu}")
    
      38
    
      39cflags=(-static
    
      40        -O2
    
      41        -Wno-implicit-function-declaration)
    
      42
    
      43ldflags=(${LDFLAGS}
    
      44         -Bstatic
    
      45         -s)
    
      46
    
      47prepare() {
    
      48  cd "${srcdir}/${pkgname}" || exit
    
      49  rm "isl" || true
    
      50  ln -s "../isl-${_islver}" "isl"
    
      51}
    
      52
    
      53# shellcheck disable=SC2154
    
      54build() {
    
      55  local _target
    
      56
    
      57  CFLAGS=""
    
      58  CXXFLAGS=""
    
      59  CPPFLAGS=""
    
      60  LDFLAGS=""
    
      61  export CFLAGS
    
      62  export CXXFLAGS
    
      63  export CPPFLAGS
    
      64  export LDFLAGS
    
      65
    
      66  local _cflags=(${cflags[@]}
    
      67                 -I/usr/include)
    
      68                 # -std=gnu++98)
    
      69
    
      70  local _ldflags=(${ldflags[@]})
    
      71                  # -ldl)
    
      72
    
      73  local _build_opts=(${_make_opts[@]}
    
      74                     CFLAGS="${_cflags[*]}"
    
      75                     CPPFLAGS="${_cflags[*]}"
    
      76                     # CXXFLAGS="${_cflags[*]}"
    
      77                     LDFLAGS="${_ldflags[*]}")
    
      78
    
      79  cd "${srcdir}/${pkgname}"
    
      80
    
      81  for _target in "${target}"; do
    
      82    rm -rf "build-${_target}"
    
      83    mkdir -p "build-${_target}"
    
      84    cd "build-${_target}"
    
      85    local _configure_opts=(--prefix="/usr"
    
      86                           --target="${_target}"
    
      87                           --host=${CHOST}
    
      88                           --build=${CHOST}
    
      89                           --enable-languages="c"
    
      90                           --with-float=hard
    
      91                           --without-headers
    
      92                           --without-newlib
    
      93                           --disable-libssp
    
      94                           --with-isl
    
      95                           --disable-multilib
    
      96                           --disable-tls)
    
      97
    
      98    "../configure" "${_configure_opts[@]}"
    
      99
    
      100    make "${_build_opts[@]}" all
    
      101    cd ..
    
      102  done
    
      103}
    
      104
    
      105# shellcheck disable=SC2154
    
      106package() {
    
      107  local _target
    
      108  cd "${srcdir}/${pkgname}"
    
      109  for _target in "${target}"; do
    
      110    cd "build-${_target}"
    
      111    make DESTDIR="${pkgdir}" "${_make_opts[@]}" install-strip
    
      112    cd ..
    
      113  done
    
      114}
    
      115

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 00:29:17	Low	2