mumps-par

maintainer petronny · 1 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package builds from source hosted on the project's official domain (mumps-solver.org), which is normal for AUR packages; the non-whitelisted host is the project's own site, so the download is legitimate and poses no supply-chain risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from source hosted on the project's official domain (mumps-solver.org), which is normal for AUR packages; the non-whitelisted host is the project's own site, so the download is legitimate and poses no supply-chain risk.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:15 source=(https://mumps-solver.org/MUMPS_${pkgver}.tar.gz

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Michele Mocciola <mickele>
2# Contributor: Guillaume Dollé < dolle dot guillaume at gmail dot com >
3# Contributor: Lucas H. Gabrielli
4pkgname=mumps-par
5pkgver=5.9.1
6pkgrel=1
7pkgdesc="Sparse solver library using Gaussian elimination, with parmetis implementation"
8url="https://mumps-solver.org/index.php"
9license=("custom")
10depends=('lapack' 'openmpi' 'scotch' 'scalapack' 'parmetis' 'metis' 'zlib' 'bzip2')
11makedepends=('gcc-fortran')
12provides=('mumps')
13conflicts=('mumps')
14arch=('i686' 'x86_64')
15source=(https://mumps-solver.org/MUMPS_${pkgver}.tar.gz
16 Makefile.inc)
17sha256sums=('659c9b57646b5a003ac618baa1faf9dd2044e46c732b3daaccbc7158003e1b46'
18 'e908b95991d58c155d48c1058447587a030b0bd6afa7de5905c88393f45d8b68')
19
20prepare() {
21 cd "${srcdir}/MUMPS_${pkgver}"
22 cp "${srcdir}/Makefile.inc" .
23}
24
25build() {
26 cd "${srcdir}/MUMPS_${pkgver}"
27 make all
28}
29
30check () {
31 cd "${srcdir}/MUMPS_${pkgver}/examples"
32 make all
33 # From the README (in examples)
34 MPIRUN="mpirun -np 3 --mca plm_rsh_agent sh --mca opal_warn_on_missing_libcuda 0 --oversubscribe"
35 export LD_LIBRARY_PATH="${LD_LIBRARY_PATH}:${srcdir}/MUMPS_${pkgver}/lib"
36 ${MPIRUN} ./ssimpletest < input_simpletest_real
37 ${MPIRUN} ./dsimpletest < input_simpletest_real
38 ${MPIRUN} ./csimpletest < input_simpletest_cmplx
39 ${MPIRUN} ./zsimpletest < input_simpletest_cmplx
40 ${MPIRUN} ./c_example
41 ${MPIRUN} ./multiple_arithmetics_example
42 ${MPIRUN} ./ssimpletest_save_restore < input_simpletest_real
43 ${MPIRUN} ./dsimpletest_save_restore < input_simpletest_real
44 ${MPIRUN} ./csimpletest_save_restore < input_simpletest_cmplx
45 ${MPIRUN} ./zsimpletest_save_restore < input_simpletest_cmplx
46 ${MPIRUN} ./c_example_save_restore
47}
48
49package(){
50 # Install all headers
51 cd "${srcdir}/MUMPS_${pkgver}/include"
52 install -m 755 -d "${pkgdir}/usr/include"
53 install -D -m644 *.h "${pkgdir}/usr/include"
54
55 # Install all libraries
56 cd "${srcdir}/MUMPS_${pkgver}/lib"
57 install -m 755 -d "${pkgdir}/usr/lib"
58 install -D -m644 lib* ${pkgdir}/usr/lib
59
60 # Install libraries mpiseq
61 cd "${srcdir}/MUMPS_${pkgver}/libseq"
62 install -m 755 -d "${pkgdir}/usr/include/mpiseq"
63 install -D -m644 *.h "${pkgdir}/usr/include/mpiseq"
64 cd "${srcdir}/MUMPS_${pkgver}/libseq"
65 install -D -m644 lib* ${pkgdir}/usr/lib
66
67 # Install examples
68 install -m 755 -d "${pkgdir}/usr/share/doc/${pkgname}/examples"
69 cd "${srcdir}/MUMPS_${pkgver}/examples"
70 install -m 644 * "${pkgdir}/usr/share/doc/${pkgname}/examples"
71 install -m 644 "${srcdir}/MUMPS_${pkgver}/Makefile.inc" "${pkgdir}/usr/share/doc/${pkgname}/examples"
72 sed -i 's_\(topdir =\).*_\1 /usr_g; s-.*\(Makefile.inc\)-include Makefile.inc-g' "${pkgdir}/usr/share/doc/${pkgname}/examples/Makefile"
73
74 # Install license
75 install -D -m644 "${srcdir}/MUMPS_${pkgver}/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
76}
77

Changes since previous scan

--- PKGBUILD @ 2026-07-21 00:24
+++ PKGBUILD @ 2026-08-03 00:08
@@ -2,7 +2,7 @@
# Contributor: Guillaume Dollé < dolle dot guillaume at gmail dot com >
# Contributor: Lucas H. Gabrielli
pkgname=mumps-par
-pkgver=5.9.0
+pkgver=5.9.1
pkgrel=1
pkgdesc="Sparse solver library using Gaussian elimination, with parmetis implementation"
url="https://mumps-solver.org/index.php"
@@ -14,7 +14,7 @@
arch=('i686' 'x86_64')
source=(https://mumps-solver.org/MUMPS_${pkgver}.tar.gz
Makefile.inc)
-sha256sums=('02c6efdb91749ec0f82351d40f3f860547272a1eb1d899126a4265b4d6bcc4ca'
+sha256sums=('659c9b57646b5a003ac618baa1faf9dd2044e46c732b3daaccbc7158003e1b46'
'e908b95991d58c155d48c1058447587a030b0bd6afa7de5905c88393f45d8b68')
prepare() {

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 11:16:59 MEDIUM 1
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion