ncl

LOW
maintainer zdenkabednar 17 votes scanned 2026-09-17 00:27:14.276658
View on AUR
Why flagged

The package builds from the official GitHub source of the NCAR NCL project and applies well-documented, benign patches from Fedora's trusted RPM repository; the non-whitelisted host (src.fedoraproject.org) hosts only patch files, not executables, and the rest of the sources are from official project repositories, making the overall risk low.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from the official GitHub source of the NCAR NCL project and applies well-documented, benign patches from Fedora's trusted RPM repository; the non-whitelisted host (src.fedoraproject.org) hosts only patch files, not executables, and the rest of the sources are from official project repositories, making the overall risk low.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:19 http://www.netlib.org/voronoi/triangle.zip Site.local ncarg.sh hluresfile ncl.install

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: XavierCLL <xavier.corredor.llano (a) gmail.com>
2# Maintainer: Michal Wojdyla < micwoj9292 at gmail dot com >
3pkgname=ncl
4pkgver=6.6.2
5pkgrel=5
6pkgdesc='Ncar Command Language, is an interpreted language designed specifically for scientific data analysis and visualization'
7url='http://www.ncl.ucar.edu'
8license=('Apache-2.0')
9arch=('i686' 'x86_64')
10depends=('libxext' 'cairo' 'pixman' 'fontconfig' 'expat' 'bzip2' 'zlib' 'netcdf' 'hdf5'
11 'triangle' 'hdf4' 'netcdf-fortran' 'libxt' 'libxaw' 'libxext' 'libxpm' 'udunits'
12 'libx11' 'imake' 'g2clib' 'gdal' 'lesstif' 'glibc' 'libjpeg' 'libpng' 'jasper' 'libaec'
13 'libxaw' 'tcsh' 'flex' 'gsl')
14makedepends=('gcc' 'gcc-fortran' 'tcsh' 'byacc' 'lapack')
15provides=('ncl')
16install=${pkgname}.install
17backup=(etc/profile.d/ncarg.sh)
18source=(ncl-$pkgver.tar.gz::https://github.com/NCAR/ncl/archive/$pkgver.tar.gz
19 http://www.netlib.org/voronoi/triangle.zip Site.local ncarg.sh hluresfile ncl.install
20 no_install_dep.patch::https://src.fedoraproject.org/rpms/ncl/raw/main/f/ncl-5.0.0-no_install_dep.patch
21 includes.patch::https://src.fedoraproject.org/rpms/ncl/raw/main/f/ncl-5.1.0-includes.patch
22 netcdff.patch::https://src.fedoraproject.org/rpms/ncl/raw/main/f/ncl-5.1.0-netcdff.patch
23 paths.patch::https://src.fedoraproject.org/rpms/ncl/raw/main/f/ncl-5.1.0-paths.patch
24 ncl-libs.patch::https://src.fedoraproject.org/rpms/ncl/raw/main/f/ncl-libs.patch
25 ncl-gdal.patch::https://src.fedoraproject.org/rpms/ncl/raw/main/f/ncl-gdal.patch
26 ncl-proj8.patch::https://src.fedoraproject.org/rpms/ncl/raw/main/f/ncl-proj8.patch
27 ncl-format.patch::https://src.fedoraproject.org/rpms/ncl/raw/main/f/ncl-format.patch
28 ncl-boz.patch::https://src.fedoraproject.org/rpms/ncl/raw/main/f/ncl-boz.patch
29 ncl-hdf4.3.patch::https://src.fedoraproject.org/rpms/ncl/raw/main/f/ncl-hdf4.3.patch
30 ncl-gcc15.patch::https://src.fedoraproject.org/rpms/ncl/raw/main/f/ncl-gcc15.patch
31 ncl-nc-set-log-level.patch::https://src.fedoraproject.org/rpms/ncl/raw/main/f/ncl-nc-set-log-level.patch)
32optdepends=('ncl-highres: High-resolution coastlines (RANGS and GSHHS)')
33sha256sums=('cad4ee47fbb744269146e64298f9efa206bc03e7b86671e9729d8986bb4bc30e'
34 '1766327add038495fa3499e9b7cc642179229750f7201b94f8e1b7bee76f8480'
35 'bbb3d9a712107a3cabb427a06960ec0e1db90f3df9891845f8dc7af66f57123a'
36 '4e2347ffc7ffe20c32124430c8a165ad9e750f60d9948f11fc7e610aa7130c8e'
37 '5b3990a78e849044cd5f0e9d98661f8325b8a5629604237dd3caa1f7e3b6e32e'
38 '79a9b66ea670dcf5a69c29ad6eab804e696ca79d050d584d66dafbd2c611bcdb'
39 '6b15ccdbd3a5c0d044b867342b5ab9daad1add6f6a488d14be955b172116c0ed'
40 '870e6e7a868a3c5c94bcd3f3af898ea9bebd666343e4b0f77e4a74e85aadf55b'
41 '4f168597ca725145c009fd33dfde27d50d936412b0365edb33be2f915d1af07c'
42 '61b9b3beab800f0de350564a42ccd54d5e7e1e23189199350f084435fbce6564'
43 '5a7516b9ddbc1af91518b030f58f4b17de0efb046ba615eab549dde6b0875e04'
44 '0ae96df73ac8902b1cd4bab203c45c4bc58b2f645ed094768884f9149066849a'
45 'f960b172438485f664a2ce72c47daf5ccd6f3ff81ecd5866ae746c2ae8300529'
46 'adb5e0eaa5edcedf0276979431dff2fba3fe7850a5bace3a3071ca858bc8b3b5'
47 '64f3502c9deab48615a4cbc26073173081c0774faf75778b044d251e45d238f7'
48 'f93d79090cdd95a7d7642271a83adad0ea394e3d4f58c3e8f31cf2e4811700e2'
49 'e1861055e58695279fed24480216d7cb46b476af67cda2f4f6557fc239208b24'
50 '899b9bee42c35c3ee3329b6f7c3009382cdbc903d82f156316c62eb7a8dee987')
51build() {
52 # copy triangle library
53 cp triangle.c triangle.h ${pkgname}-$pkgver/ni/src/lib/hlu/
54
55 cd ${pkgname}-$pkgver
56
57 # patchs http://pkgs.fedoraproject.org/cgit/rpms/ncl.git
58 patch -Np1 --ignore-whitespace -i ../no_install_dep.patch
59 patch -Np1 --ignore-whitespace -i ../includes.patch
60 patch -Np1 --ignore-whitespace -i ../netcdff.patch
61 patch -Np1 --ignore-whitespace -i ../paths.patch
62 patch -Np1 --ignore-whitespace -i ../ncl-libs.patch
63 patch -Np1 --ignore-whitespace -i ../ncl-gdal.patch
64 patch -Np1 --ignore-whitespace -i ../ncl-proj8.patch
65 patch -Np1 --ignore-whitespace -i ../ncl-format.patch
66 patch -Np1 --ignore-whitespace -i ../ncl-boz.patch
67 patch -Np1 --ignore-whitespace -i ../ncl-hdf4.3.patch
68 patch -Np1 --ignore-whitespace -i ../ncl-gcc15.patch
69 patch -Np1 --ignore-whitespace -i ../ncl-nc-set-log-level.patch
70
71 # Spurrious exec permissions
72 find -name '*.[fh]' -exec chmod -x {} +
73
74 #Fixup LINUX config (to expose vsnprintf prototype)
75 sed -i -e '/StdDefines/s/-DSYSV/-D_ISOC99_SOURCE/' config/LINUX
76
77 rm -rf external/blas external/lapack
78 sed -ri -e 's,-lblas_ncl,-lblas,' \
79 -e 's,-llapack_ncl,-llapack,' config/Project
80
81 # configure
82 #./Configure -ncar || return 1
83 cp ../Site.local config/
84 sed -i "s|YmakeRoot /usr|YmakeRoot ${pkgdir}/usr|g" config/Site.local
85 # Fixup LINUX config (to expose vsnprintf prototype)
86 sed -i -e '/StdDefines/s/-DSYSV/-D_ISOC99_SOURCE/' config/LINUX
87 # fix include c.h
88 sed -i 's|#include <ncarg/c.h>|#include "c.h"|g' common/src/libncarg_c/env.c \
89 common/src/libncarg_c/gsbytes.c common/src/libncarg_c/logic32.c common/src/libncarg_c/logic64.c \
90 common/src/libncarg_c/mangle.c common/src/libncarg_c/rwchinfl.c common/src/libncarg_c/trnspprt.c
91 # fix netcdf.h
92 sed -i 's|#include <netcdf.h>|#include "/usr/include/netcdf.h"|g' `find . -name \*.c`
93 sed -i 's|#include <netcdf.h>|#include "/usr/include/netcdf.h"|g' `find . -name \*.h`
94
95 ./config/ymkmf
96
97 # build
98 make Build CCOPTIONS="-O2 -std=c99 -fPIC -fno-strict-aliasing -fopenmp -lnetcdf -fcommon -DH5_USE_110_API -Wno-implicit-int -Wno-implicit-function-declaration -Wno-int-conversion -Wno-incompatible-pointer-types" F77="gfortran" F77_LD="gfortran"\
99 CTOFLIBS="-lgfortran" FCOPTIONS="-fPIC -fno-second-underscore -fno-range-check -fopenmp -fallow-argument-mismatch -fcommon -DH5_USE_110_API" # >> log 2>&1
100}
101
102package() {
103 # install
104 cd ${pkgname}-$pkgver
105 make install # >> log 2>&1
106
107 # move libs
108 mv ${pkgdir}/usr/share/ncarg/* ${pkgdir}/usr/lib/ncarg/
109 rm -rf ${pkgdir}/usr/share/ncarg
110
111 # Use system udunits
112 rm -rf ${pkgdir}/usr/lib/ncarg/udunits
113 ln -s /usr/share/udunits ${pkgdir}/usr/lib/ncarg/
114
115 # set variable ncarg in system
116 install -dv ${pkgdir}/etc/profile.d
117 install --mode=755 ../ncarg.sh --target-directory=${pkgdir}/etc/profile.d/
118
119 # copy hluresfile
120 install --mode=644 ../hluresfile --target-directory=${pkgdir}/usr/lib/ncarg/
121
122 # compress and put in order man files
123 cd $pkgdir/usr/man
124 for listman in `ls`
125 do
126 mkdir -p $pkgdir/usr/share/man/$listman
127 cd $pkgdir/usr/man/$listman
128 for manfiles in `ls`
129 do
130 gzip $manfiles
131 mv ${manfiles}.gz $pkgdir/usr/share/man/$listman/
132 done
133 done
134 rm -Rf $pkgdir/usr/man/
135}
136

Scan history

Scanned at (UTC)SeverityRules
2026-09-17 00:27:14 Low 2
2026-09-16 00:03:17 Low 2
2026-09-15 00:25:31 Low 2
2026-09-14 00:27:57 Low 2
2026-09-13 00:19:54 Low 2
2026-09-12 00:25:17 Low 2
2026-09-11 00:19:22 Low 2
2026-09-10 00:22:44 Low 2
2026-09-09 00:04:09 Low 2
2026-09-08 00:18:08 Low 2
2026-09-07 00:30:15 Low 2
2026-09-06 00:17:06 Low 2
2026-09-05 00:16:27 Low 2
2026-09-04 00:03:13 Low 2
2026-09-03 00:15:47 Low 2
2026-09-02 00:02:31 Low 2
2026-09-01 00:11:19 Low 2
2026-08-31 00:19:57 Low 2
2026-08-30 00:04:14 Low 2
2026-08-29 00:29:17 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion