ncl-highres

maintainer orphaned · 2 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package downloads coastline data files from a research institution's website for use with NCL; the files are not executable, and the host, while not standard, is plausibly legitimate for the data source, resulting in low risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads coastline data files from a research institution's website for use with NCL; the files are not executable, and the host, while not standard, is plausibly legitimate for the data source, resulting in low risk.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:13 source=("https://www.io-warnemuende.de/tl_files/staff/rfeistel/download/rangs(0).zip"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: XavierCLL <xavier.corredor.llano (a) gmail.com>
2
3pkgname=ncl-highres
4pkgver=1
5pkgrel=4
6pkgdesc="High-resolution coastlines for NCL, RANGS (Regionally Accessible Nested Global Shorelines) and GSHHS (Global Self-consistent Hierarchical High-resolution Shoreline)"
7arch=('any')
8license=('public domain')
9url="http://www.ncl.ucar.edu/Document/Graphics/rangs.shtml"
10depends=('ncl')
11makedepends=('unzip')
12optdepends=()
13source=("https://www.io-warnemuende.de/tl_files/staff/rfeistel/download/rangs(0).zip"
14 "https://www.io-warnemuende.de/tl_files/staff/rfeistel/download/rangs(1).zip"
15 "https://www.io-warnemuende.de/tl_files/staff/rfeistel/download/rangs(2).zip"
16 "https://www.io-warnemuende.de/tl_files/staff/rfeistel/download/rangs(3).zip"
17 "https://www.io-warnemuende.de/tl_files/staff/rfeistel/download/rangs(4).zip"
18 "https://www.io-warnemuende.de/tl_files/staff/rfeistel/download/gshhs(0).zip"
19 "https://www.io-warnemuende.de/tl_files/staff/rfeistel/download/gshhs(1).zip"
20 "https://www.io-warnemuende.de/tl_files/staff/rfeistel/download/gshhs(2).zip"
21 "https://www.io-warnemuende.de/tl_files/staff/rfeistel/download/gshhs(3).zip"
22 "https://www.io-warnemuende.de/tl_files/staff/rfeistel/download/gshhs(4).zip")
23sha256sums=('f61d35bddef1207ecb7571ff338b2b2ad3701aeda029bd9f54f28e82636d878f'
24 'e11a24f05d58e94cc8214c98ec4084b26d1cb5dac36353bfeec401e1b069791d'
25 '846aff301b6b4d9b6cccc0a7460a67fad944a50f4106b2656b87fef4c8e8dedf'
26 '66f06c2a6f9639251d0bcf9331813fa6124404e7e914031e5d3a228e14d92a26'
27 '87c142e179d5a60918a932402ab47778baa7560db4b91eb1e6f65b9f0934daa4'
28 'a999920016c45df2333ffc10da3aa6e654fbda2a7703945ebc7cb36d865c797f'
29 'a8ddf8ab60c64226d4cc3fa42408228dd856738282377371a375b1185ed8deb4'
30 '5923a7116353aade1ea17496545ec1c142a8ee289f007f29f48ea0a923abe4aa'
31 '997eca9960541cb11e2bc91792f90f5e65588416ac8bfe670d06b30e296df02a'
32 '85214163c2ff3732e5b8bbb922523521ab029e0d5c242be472967ee798d86b03')
33provides=('ncl-highres')
34
35package() {
36 install -dm 755 $pkgdir/usr/lib/ncarg/database/rangs
37 install -Dm 644 *.rim *.cat *.cel $pkgdir/usr/lib/ncarg/database/rangs/
38}
39

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion