molden
LOW
maintainer banana-bred
7 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The source is a tarball from a university-hosted FTP server that plausibly belongs to the project; building from project-owned infrastructure is normal for AUR packages, even if the host is not whitelisted.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from a university-hosted FTP server that plausibly belongs to the project; building from project-owned infrastructure is normal for AUR packages, even if the host is not whitelisted.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:31
"https://ftp.science.ru.nl/Molden/${pkgname}${pkgver}.tar.gz"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: banana-bred <j.forer@posteo.net>
2
pkgname="molden"
3
pkgver=7.3
4
pkgrel=7
5
pkgdesc="A program for molecular and electronic structure visualization"
6
arch=('i686' 'x86_64')
7
url="https://www.theochem.ru.nl/molden/"
8
license=('custom')
9
groups=()
10
depends=('mesa' 'glu')
11
makedepends=(
12
'vi'
13
'gcc-fortran'
14
'xorgproto'
15
'libx11'
16
'makedepend'
17
'libxmu'
18
)
19
optdepends=(
20
'openbabel: to create 2D images of the molecules in a .sdf file'
21
'wget: to fetch PDB from rcsb.org'
22
)
23
provides=('molden')
24
conflicts=()
25
replaces=()
26
backup=()
27
options=()
28
install=
29
changelog=
30
source=(
31
"https://ftp.science.ru.nl/Molden/${pkgname}${pkgver}.tar.gz"
32
)
33
noextract=()
34
sha256sums=('870f4fa6635229791bb09bbbd07f51456b2c90101d73564dc47ed7769b8c07a1')
35
36
prepare() {
37
cd "molden${pkgver}"
38
39
# Patch to compile with gfortran 10+
40
# Original contribution by Panadestein on 5/31/2020
41
sed -i 's/FFLAGS += -g ${AFLAG}/& -fallow-argument-mismatch/g' makefile
42
sed -i 's/FFLAGS = -g ${AFLAG}/& -fallow-argument-mismatch/g' docker/makefile
43
44
# -- use mkstemp instead of mktemp
45
sed -i 's/mktemp/mkstemp/g' src/xwin.c
46
47
# -- ensure Wno-implicit-function-declaration is used to suppress this warning that becomes an error
48
sed -i "106s/^/# /; 109s/^/# /" makefile
49
sed -i "68s/^/# /; 71s/^/# /" docker/makefile
50
51
# -- get the path to the current gcc version to add as an include directory for 'surf'
52
_gccInclude="$(echo "$(dirname "$(gcc -print-prog-name=cc1)")/include" | sed 's/\//\\\//g')"
53
54
# -- update include directories for surf
55
sed -i "s/\(^INCLUDE\s*=\).*/\1 -I .\/ -I ${_gccInclude}/" src/surf/Makefile
56
57
}
58
59
build() {
60
cd "molden${pkgver}"
61
make -k -j CC="gcc -std=gnu17"
62
}
63
64
package() {
65
cd "molden${pkgver}"
66
install -t "$pkgdir/usr/bin/" -Dm755 bin/{molden,gmolden,ambfor,ambmd,surf}
67
install -t "$pkgdir/usr/share/doc/$pkgname" -Dm755 doc/figures.ps.Z doc/manual.ps.Z doc/manual.txt.Z
68
install -t "$pkgdir/usr/share/licenses/$pkgname/" -Dm755 CopyRight MOLDEN_COMMERCIAL_LICENSE REGISTER
69
}
70
71
# vim: ts=2 sw=2 et :
72
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |