ncl
maintainer zdenkabednar
· 17 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The package builds from the official GitHub source of the NCAR NCL project and applies well-documented, benign patches from Fedora's trusted RPM repository; the non-whitelisted host (src.fedoraproject.org) hosts only patch files, not executables, and the rest of the sources are from official project repositories, making the overall risk low.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from the official GitHub source of the NCAR NCL project and applies well-documented, benign patches from Fedora's trusted RPM repository; the non-whitelisted host (src.fedoraproject.org) hosts only patch files, not executables, and the rest of the sources are from official project repositories, making the overall risk low.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:19
http://www.netlib.org/voronoi/triangle.zip Site.local ncarg.sh hluresfile ncl.install
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: XavierCLL <xavier.corredor.llano (a) gmail.com>
2
# Maintainer: Michal Wojdyla < micwoj9292 at gmail dot com >
3
pkgname=ncl
4
pkgver=6.6.2
5
pkgrel=5
6
pkgdesc='Ncar Command Language, is an interpreted language designed specifically for scientific data analysis and visualization'
7
url='http://www.ncl.ucar.edu'
8
license=('Apache-2.0')
9
arch=('i686' 'x86_64')
10
depends=('libxext' 'cairo' 'pixman' 'fontconfig' 'expat' 'bzip2' 'zlib' 'netcdf' 'hdf5'
11
'triangle' 'hdf4' 'netcdf-fortran' 'libxt' 'libxaw' 'libxext' 'libxpm' 'udunits'
12
'libx11' 'imake' 'g2clib' 'gdal' 'lesstif' 'glibc' 'libjpeg' 'libpng' 'jasper' 'libaec'
13
'libxaw' 'tcsh' 'flex' 'gsl')
14
makedepends=('gcc' 'gcc-fortran' 'tcsh' 'byacc' 'lapack')
15
provides=('ncl')
16
install=${pkgname}.install
17
backup=(etc/profile.d/ncarg.sh)
18
source=(ncl-$pkgver.tar.gz::https://github.com/NCAR/ncl/archive/$pkgver.tar.gz
19
http://www.netlib.org/voronoi/triangle.zip Site.local ncarg.sh hluresfile ncl.install
20
no_install_dep.patch::https://src.fedoraproject.org/rpms/ncl/raw/main/f/ncl-5.0.0-no_install_dep.patch
21
includes.patch::https://src.fedoraproject.org/rpms/ncl/raw/main/f/ncl-5.1.0-includes.patch
22
netcdff.patch::https://src.fedoraproject.org/rpms/ncl/raw/main/f/ncl-5.1.0-netcdff.patch
23
paths.patch::https://src.fedoraproject.org/rpms/ncl/raw/main/f/ncl-5.1.0-paths.patch
24
ncl-libs.patch::https://src.fedoraproject.org/rpms/ncl/raw/main/f/ncl-libs.patch
25
ncl-gdal.patch::https://src.fedoraproject.org/rpms/ncl/raw/main/f/ncl-gdal.patch
26
ncl-proj8.patch::https://src.fedoraproject.org/rpms/ncl/raw/main/f/ncl-proj8.patch
27
ncl-format.patch::https://src.fedoraproject.org/rpms/ncl/raw/main/f/ncl-format.patch
28
ncl-boz.patch::https://src.fedoraproject.org/rpms/ncl/raw/main/f/ncl-boz.patch
29
ncl-hdf4.3.patch::https://src.fedoraproject.org/rpms/ncl/raw/main/f/ncl-hdf4.3.patch
30
ncl-gcc15.patch::https://src.fedoraproject.org/rpms/ncl/raw/main/f/ncl-gcc15.patch
31
ncl-nc-set-log-level.patch::https://src.fedoraproject.org/rpms/ncl/raw/main/f/ncl-nc-set-log-level.patch)
32
optdepends=('ncl-highres: High-resolution coastlines (RANGS and GSHHS)')
33
sha256sums=('cad4ee47fbb744269146e64298f9efa206bc03e7b86671e9729d8986bb4bc30e'
34
'1766327add038495fa3499e9b7cc642179229750f7201b94f8e1b7bee76f8480'
35
'bbb3d9a712107a3cabb427a06960ec0e1db90f3df9891845f8dc7af66f57123a'
36
'4e2347ffc7ffe20c32124430c8a165ad9e750f60d9948f11fc7e610aa7130c8e'
37
'5b3990a78e849044cd5f0e9d98661f8325b8a5629604237dd3caa1f7e3b6e32e'
38
'79a9b66ea670dcf5a69c29ad6eab804e696ca79d050d584d66dafbd2c611bcdb'
39
'6b15ccdbd3a5c0d044b867342b5ab9daad1add6f6a488d14be955b172116c0ed'
40
'870e6e7a868a3c5c94bcd3f3af898ea9bebd666343e4b0f77e4a74e85aadf55b'
41
'4f168597ca725145c009fd33dfde27d50d936412b0365edb33be2f915d1af07c'
42
'61b9b3beab800f0de350564a42ccd54d5e7e1e23189199350f084435fbce6564'
43
'5a7516b9ddbc1af91518b030f58f4b17de0efb046ba615eab549dde6b0875e04'
44
'0ae96df73ac8902b1cd4bab203c45c4bc58b2f645ed094768884f9149066849a'
45
'f960b172438485f664a2ce72c47daf5ccd6f3ff81ecd5866ae746c2ae8300529'
46
'adb5e0eaa5edcedf0276979431dff2fba3fe7850a5bace3a3071ca858bc8b3b5'
47
'64f3502c9deab48615a4cbc26073173081c0774faf75778b044d251e45d238f7'
48
'f93d79090cdd95a7d7642271a83adad0ea394e3d4f58c3e8f31cf2e4811700e2'
49
'e1861055e58695279fed24480216d7cb46b476af67cda2f4f6557fc239208b24'
50
'899b9bee42c35c3ee3329b6f7c3009382cdbc903d82f156316c62eb7a8dee987')
51
build() {
52
# copy triangle library
53
cp triangle.c triangle.h ${pkgname}-$pkgver/ni/src/lib/hlu/
54
55
cd ${pkgname}-$pkgver
56
57
# patchs http://pkgs.fedoraproject.org/cgit/rpms/ncl.git
58
patch -Np1 --ignore-whitespace -i ../no_install_dep.patch
59
patch -Np1 --ignore-whitespace -i ../includes.patch
60
patch -Np1 --ignore-whitespace -i ../netcdff.patch
61
patch -Np1 --ignore-whitespace -i ../paths.patch
62
patch -Np1 --ignore-whitespace -i ../ncl-libs.patch
63
patch -Np1 --ignore-whitespace -i ../ncl-gdal.patch
64
patch -Np1 --ignore-whitespace -i ../ncl-proj8.patch
65
patch -Np1 --ignore-whitespace -i ../ncl-format.patch
66
patch -Np1 --ignore-whitespace -i ../ncl-boz.patch
67
patch -Np1 --ignore-whitespace -i ../ncl-hdf4.3.patch
68
patch -Np1 --ignore-whitespace -i ../ncl-gcc15.patch
69
patch -Np1 --ignore-whitespace -i ../ncl-nc-set-log-level.patch
70
71
# Spurrious exec permissions
72
find -name '*.[fh]' -exec chmod -x {} +
73
74
#Fixup LINUX config (to expose vsnprintf prototype)
75
sed -i -e '/StdDefines/s/-DSYSV/-D_ISOC99_SOURCE/' config/LINUX
76
77
rm -rf external/blas external/lapack
78
sed -ri -e 's,-lblas_ncl,-lblas,' \
79
-e 's,-llapack_ncl,-llapack,' config/Project
80
81
# configure
82
#./Configure -ncar || return 1
83
cp ../Site.local config/
84
sed -i "s|YmakeRoot /usr|YmakeRoot ${pkgdir}/usr|g" config/Site.local
85
# Fixup LINUX config (to expose vsnprintf prototype)
86
sed -i -e '/StdDefines/s/-DSYSV/-D_ISOC99_SOURCE/' config/LINUX
87
# fix include c.h
88
sed -i 's|#include <ncarg/c.h>|#include "c.h"|g' common/src/libncarg_c/env.c \
89
common/src/libncarg_c/gsbytes.c common/src/libncarg_c/logic32.c common/src/libncarg_c/logic64.c \
90
common/src/libncarg_c/mangle.c common/src/libncarg_c/rwchinfl.c common/src/libncarg_c/trnspprt.c
91
# fix netcdf.h
92
sed -i 's|#include <netcdf.h>|#include "/usr/include/netcdf.h"|g' `find . -name \*.c`
93
sed -i 's|#include <netcdf.h>|#include "/usr/include/netcdf.h"|g' `find . -name \*.h`
94
95
./config/ymkmf
96
97
# build
98
make Build CCOPTIONS="-O2 -std=c99 -fPIC -fno-strict-aliasing -fopenmp -lnetcdf -fcommon -DH5_USE_110_API -Wno-implicit-int -Wno-implicit-function-declaration -Wno-int-conversion -Wno-incompatible-pointer-types" F77="gfortran" F77_LD="gfortran"\
99
CTOFLIBS="-lgfortran" FCOPTIONS="-fPIC -fno-second-underscore -fno-range-check -fopenmp -fallow-argument-mismatch -fcommon -DH5_USE_110_API" # >> log 2>&1
100
}
101
102
package() {
103
# install
104
cd ${pkgname}-$pkgver
105
make install # >> log 2>&1
106
107
# move libs
108
mv ${pkgdir}/usr/share/ncarg/* ${pkgdir}/usr/lib/ncarg/
109
rm -rf ${pkgdir}/usr/share/ncarg
110
111
# Use system udunits
112
rm -rf ${pkgdir}/usr/lib/ncarg/udunits
113
ln -s /usr/share/udunits ${pkgdir}/usr/lib/ncarg/
114
115
# set variable ncarg in system
116
install -dv ${pkgdir}/etc/profile.d
117
install --mode=755 ../ncarg.sh --target-directory=${pkgdir}/etc/profile.d/
118
119
# copy hluresfile
120
install --mode=644 ../hluresfile --target-directory=${pkgdir}/usr/lib/ncarg/
121
122
# compress and put in order man files
123
cd $pkgdir/usr/man
124
for listman in `ls`
125
do
126
mkdir -p $pkgdir/usr/share/man/$listman
127
cd $pkgdir/usr/man/$listman
128
for manfiles in `ls`
129
do
130
gzip $manfiles
131
mv ${manfiles}.gz $pkgdir/usr/share/man/$listman/
132
done
133
done
134
rm -Rf $pkgdir/usr/man/
135
}
136
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |
| 2026-07-15 00:09:25 | LOW | 2 |