mosek

maintainer Viech · 6 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The source is a prebuilt binary distribution from the official vendor's download domain (download.mosek.com), which is plausibly part of MOSEK's own release infrastructure; despite the non-whitelisted host, this is a standard and expected source for a commercial solver, and the checksum is provided and valid.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a prebuilt binary distribution from the official vendor's download domain (download.mosek.com), which is plausibly part of MOSEK's own release infrastructure; despite the non-whitelisted host, this is a standard and expected source for a commercial solver, and the checksum is provided and valid.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:18 source=("mosek-${pkgver}.tar.bz2::https://download.mosek.com/stable/${pkgver}/mosektools${_mosekarch}.tar.bz2")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Maximilian Stahlberg <maximilian.stahlberg tuhh de>
2# Maintainer: Ido Rosen <ido@kernel.org>
3
4pkgname=mosek
5pkgdesc="A commercial solver for mathematical optimization problems."
6pkgver=11.2.2
7pkgrel=1
8epoch=1
9arch=('x86_64')
10_ver=${pkgver%.*}
11_mosekarch=linux64x86
12url='https://www.mosek.com'
13license=('custom')
14depends=('gcc-libs' 'openmp')
15makedepends=('python-setuptools' 'execstack')
16optdepends=('python: Python bindings')
17options=('!strip')
18source=("mosek-${pkgver}.tar.bz2::https://download.mosek.com/stable/${pkgver}/mosektools${_mosekarch}.tar.bz2")
19sha256sums=('0d5499fbc82098aec4ca2687602523c50ff7998e467149605d545f45e881922c')
20
21package() {
22 # Install shared libraries.
23 cd "${srcdir}/mosek/${_ver}/tools/platform/${_mosekarch}/bin"
24 install -dm755 "${pkgdir}/usr/lib"
25 install -m755 "libmosek64.so.${_ver}" "${pkgdir}/usr/lib/"
26 install -m755 "libmosekxx${_ver/./_}.so" "${pkgdir}/usr/lib/"
27 ln -rs "${pkgdir}/usr/lib/libmosek64.so.${_ver}" "${pkgdir}/usr/lib/libmosek64.so"
28
29 # Install command line utilities.
30 cd "${srcdir}/mosek/${_ver}/tools/platform/${_mosekarch}/bin"
31 install -dm755 "${pkgdir}/usr/bin"
32 install -m755 mosek "${pkgdir}/usr/bin/"
33
34 # Install C bindings.
35 cd "${srcdir}/mosek/${_ver}/tools/platform/${_mosekarch}/h"
36 install -dm755 "${pkgdir}/usr/include"
37 install -m755 mosek.h "${pkgdir}/usr/include/"
38
39 # Install Python bindings.
40 cd "${srcdir}/mosek/${_ver}/tools/platform/${_mosekarch}/python/3"
41 python setup.py install --root="${pkgdir}" --optimize=1
42
43 # Install documentation.
44 cd "${srcdir}/mosek/${_ver}"
45 install -Dm644 mosek-eula.pdf "${pkgdir}/usr/share/licenses/mosek/eula.pdf"
46 install -dm755 "${pkgdir}/usr/share/doc/mosek"
47 cp -r doc/*.pdf tools/examples "${pkgdir}/usr/share/doc/mosek/"
48 rm "${pkgdir}/usr/share/doc/mosek/examples/"{c,java}/Makefile
49 rm "${pkgdir}/usr/share/doc/mosek/examples/fusion/"{cxx,java}/Makefile
50}
51

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 07:48:03 MEDIUM 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion