mumps-par

LOW
maintainer petronny 1 votes scanned 2026-09-17 00:27:14.276658
View on AUR
Why flagged

The package builds from source hosted on the project's official domain (mumps-solver.org), which is normal for AUR packages; the non-whitelisted host is the project's own site, so the download is legitimate and poses no supply-chain risk.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from source hosted on the project's official domain (mumps-solver.org), which is normal for AUR packages; the non-whitelisted host is the project's own site, so the download is legitimate and poses no supply-chain risk.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:15 source=(https://mumps-solver.org/MUMPS_${pkgver}.tar.gz

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Michele Mocciola <mickele>
2# Contributor: Guillaume Dollé < dolle dot guillaume at gmail dot com >
3# Contributor: Lucas H. Gabrielli
4pkgname=mumps-par
5pkgver=5.9.1
6pkgrel=1
7pkgdesc="Sparse solver library using Gaussian elimination, with parmetis implementation"
8url="https://mumps-solver.org/index.php"
9license=("custom")
10depends=('lapack' 'openmpi' 'scotch' 'scalapack' 'parmetis' 'metis' 'zlib' 'bzip2')
11makedepends=('gcc-fortran')
12provides=('mumps')
13conflicts=('mumps')
14arch=('i686' 'x86_64')
15source=(https://mumps-solver.org/MUMPS_${pkgver}.tar.gz
16 Makefile.inc)
17sha256sums=('659c9b57646b5a003ac618baa1faf9dd2044e46c732b3daaccbc7158003e1b46'
18 'e908b95991d58c155d48c1058447587a030b0bd6afa7de5905c88393f45d8b68')
19
20prepare() {
21 cd "${srcdir}/MUMPS_${pkgver}"
22 cp "${srcdir}/Makefile.inc" .
23}
24
25build() {
26 cd "${srcdir}/MUMPS_${pkgver}"
27 make all
28}
29
30check () {
31 cd "${srcdir}/MUMPS_${pkgver}/examples"
32 make all
33 # From the README (in examples)
34 MPIRUN="mpirun -np 3 --mca plm_rsh_agent sh --mca opal_warn_on_missing_libcuda 0 --oversubscribe"
35 export LD_LIBRARY_PATH="${LD_LIBRARY_PATH}:${srcdir}/MUMPS_${pkgver}/lib"
36 ${MPIRUN} ./ssimpletest < input_simpletest_real
37 ${MPIRUN} ./dsimpletest < input_simpletest_real
38 ${MPIRUN} ./csimpletest < input_simpletest_cmplx
39 ${MPIRUN} ./zsimpletest < input_simpletest_cmplx
40 ${MPIRUN} ./c_example
41 ${MPIRUN} ./multiple_arithmetics_example
42 ${MPIRUN} ./ssimpletest_save_restore < input_simpletest_real
43 ${MPIRUN} ./dsimpletest_save_restore < input_simpletest_real
44 ${MPIRUN} ./csimpletest_save_restore < input_simpletest_cmplx
45 ${MPIRUN} ./zsimpletest_save_restore < input_simpletest_cmplx
46 ${MPIRUN} ./c_example_save_restore
47}
48
49package(){
50 # Install all headers
51 cd "${srcdir}/MUMPS_${pkgver}/include"
52 install -m 755 -d "${pkgdir}/usr/include"
53 install -D -m644 *.h "${pkgdir}/usr/include"
54
55 # Install all libraries
56 cd "${srcdir}/MUMPS_${pkgver}/lib"
57 install -m 755 -d "${pkgdir}/usr/lib"
58 install -D -m644 lib* ${pkgdir}/usr/lib
59
60 # Install libraries mpiseq
61 cd "${srcdir}/MUMPS_${pkgver}/libseq"
62 install -m 755 -d "${pkgdir}/usr/include/mpiseq"
63 install -D -m644 *.h "${pkgdir}/usr/include/mpiseq"
64 cd "${srcdir}/MUMPS_${pkgver}/libseq"
65 install -D -m644 lib* ${pkgdir}/usr/lib
66
67 # Install examples
68 install -m 755 -d "${pkgdir}/usr/share/doc/${pkgname}/examples"
69 cd "${srcdir}/MUMPS_${pkgver}/examples"
70 install -m 644 * "${pkgdir}/usr/share/doc/${pkgname}/examples"
71 install -m 644 "${srcdir}/MUMPS_${pkgver}/Makefile.inc" "${pkgdir}/usr/share/doc/${pkgname}/examples"
72 sed -i 's_\(topdir =\).*_\1 /usr_g; s-.*\(Makefile.inc\)-include Makefile.inc-g' "${pkgdir}/usr/share/doc/${pkgname}/examples/Makefile"
73
74 # Install license
75 install -D -m644 "${srcdir}/MUMPS_${pkgver}/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
76}
77

Scan history

Scanned at (UTC)SeverityRules
2026-09-17 00:27:14 Low 2
2026-09-16 00:03:17 Low 2
2026-09-15 00:25:31 Low 2
2026-09-14 00:27:57 Low 2
2026-09-13 00:19:54 Low 2
2026-09-12 00:25:17 Low 2
2026-09-11 00:19:22 Low 2
2026-09-10 00:22:44 Low 2
2026-09-09 00:04:09 Low 2
2026-09-08 00:18:08 Low 2
2026-09-07 00:30:15 Low 2
2026-09-06 00:17:06 Low 2
2026-09-05 00:16:27 Low 2
2026-09-04 00:03:13 Low 2
2026-09-03 00:15:47 Low 2
2026-09-02 00:02:31 Low 2
2026-09-01 00:11:19 Low 2
2026-08-31 00:19:57 Low 2
2026-08-30 00:04:14 Low 2
2026-08-29 00:29:17 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion