ncl-highres

LOW
maintainer orphaned 2 votes scanned 2026-09-17 00:27:14.276658
View on AUR
Why flagged

The package downloads coastline data files from a research institution's website for use with NCL; the files are not executable, and the host, while not standard, is plausibly legitimate for the data source, resulting in low risk.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads coastline data files from a research institution's website for use with NCL; the files are not executable, and the host, while not standard, is plausibly legitimate for the data source, resulting in low risk.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:13 source=("https://www.io-warnemuende.de/tl_files/staff/rfeistel/download/rangs(0).zip"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: XavierCLL <xavier.corredor.llano (a) gmail.com>
2
3pkgname=ncl-highres
4pkgver=1
5pkgrel=4
6pkgdesc="High-resolution coastlines for NCL, RANGS (Regionally Accessible Nested Global Shorelines) and GSHHS (Global Self-consistent Hierarchical High-resolution Shoreline)"
7arch=('any')
8license=('public domain')
9url="http://www.ncl.ucar.edu/Document/Graphics/rangs.shtml"
10depends=('ncl')
11makedepends=('unzip')
12optdepends=()
13source=("https://www.io-warnemuende.de/tl_files/staff/rfeistel/download/rangs(0).zip"
14 "https://www.io-warnemuende.de/tl_files/staff/rfeistel/download/rangs(1).zip"
15 "https://www.io-warnemuende.de/tl_files/staff/rfeistel/download/rangs(2).zip"
16 "https://www.io-warnemuende.de/tl_files/staff/rfeistel/download/rangs(3).zip"
17 "https://www.io-warnemuende.de/tl_files/staff/rfeistel/download/rangs(4).zip"
18 "https://www.io-warnemuende.de/tl_files/staff/rfeistel/download/gshhs(0).zip"
19 "https://www.io-warnemuende.de/tl_files/staff/rfeistel/download/gshhs(1).zip"
20 "https://www.io-warnemuende.de/tl_files/staff/rfeistel/download/gshhs(2).zip"
21 "https://www.io-warnemuende.de/tl_files/staff/rfeistel/download/gshhs(3).zip"
22 "https://www.io-warnemuende.de/tl_files/staff/rfeistel/download/gshhs(4).zip")
23sha256sums=('f61d35bddef1207ecb7571ff338b2b2ad3701aeda029bd9f54f28e82636d878f'
24 'e11a24f05d58e94cc8214c98ec4084b26d1cb5dac36353bfeec401e1b069791d'
25 '846aff301b6b4d9b6cccc0a7460a67fad944a50f4106b2656b87fef4c8e8dedf'
26 '66f06c2a6f9639251d0bcf9331813fa6124404e7e914031e5d3a228e14d92a26'
27 '87c142e179d5a60918a932402ab47778baa7560db4b91eb1e6f65b9f0934daa4'
28 'a999920016c45df2333ffc10da3aa6e654fbda2a7703945ebc7cb36d865c797f'
29 'a8ddf8ab60c64226d4cc3fa42408228dd856738282377371a375b1185ed8deb4'
30 '5923a7116353aade1ea17496545ec1c142a8ee289f007f29f48ea0a923abe4aa'
31 '997eca9960541cb11e2bc91792f90f5e65588416ac8bfe670d06b30e296df02a'
32 '85214163c2ff3732e5b8bbb922523521ab029e0d5c242be472967ee798d86b03')
33provides=('ncl-highres')
34
35package() {
36 install -dm 755 $pkgdir/usr/lib/ncarg/database/rangs
37 install -Dm 644 *.rim *.cat *.cel $pkgdir/usr/lib/ncarg/database/rangs/
38}
39

Scan history

Scanned at (UTC)SeverityRules
2026-09-17 00:27:14 Low 2
2026-09-16 00:03:17 Low 2
2026-09-15 00:25:31 Low 2
2026-09-14 00:27:57 Low 2
2026-09-13 00:19:54 Low 2
2026-09-12 00:25:17 Low 2
2026-09-11 00:19:22 Low 2
2026-09-10 00:22:44 Low 2
2026-09-09 00:04:09 Low 2
2026-09-08 00:18:08 Low 2
2026-09-07 00:30:15 Low 2
2026-09-06 00:17:06 Low 2
2026-09-05 00:16:27 Low 2
2026-09-04 00:03:13 Low 2
2026-09-03 00:15:47 Low 2
2026-09-02 00:02:31 Low 2
2026-09-01 00:11:19 Low 2
2026-08-31 00:19:57 Low 2
2026-08-30 00:04:14 Low 2
2026-08-29 00:29:17 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion