neatroff-suite-git

maintainer aksr · 1 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The non-standard host hosts only static PDF documentation files, which are non-executable data; the actual code is pulled from trusted GitHub repositories, making the risk low.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The non-standard host hosts only static PDF documentation files, which are non-executable data; the actual code is pulled from trusted GitHub repositories, making the risk low.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:30 'http://dev.rudi.ir/neatroff.pdf'

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: aksr <aksr at t-com dot me>
    
      2pkgname=neatroff-suite-git
    
      3pkgver=r556.d06e79c
    
      4pkgrel=2
    
      5epoch=
    
      6pkgdesc='A complete neatroff typesetting system (neatmkfn, neatroff, neatpost, neateqn, neatrefer and neatshape).'
    
      7arch=('i686' 'x86_64')
    
      8url='http://dev.rudi.ir/'
    
      9license=('ISC' 'LPL-1.02')
    
      10depends=('gsfonts-type1')
    
      11makedepends=('git')
    
      12optdepends=('troff-git: Port of Plan 9 troff (the preprocessors and the macro packages can be used with neatroff'
    
      13            'bib2ref: Converts bibtex files to refer databases'
    
      14            'ref2bib: Converts refer databases to bibtex files'
    
      15            'nref: Manages document references, it can be used as a troff preprocessor')
    
      16checkdepends=()
    
      17provides=('neatmkfn' 'neatroff' 'neatpost' 'neateqn' 'neatrefer' 'shape')
    
      18conflicts=('neatroff' 'neatroff-git' 'neatmkfn' 'neatmkfn-git'
    
      19           'neatpost' 'neatpost-git' 'neateqn' 'neateqn-git'
    
      20           'neatrefer' 'neatrefer-git' 'shape' 'neatshape')
    
      21replaces=('mktrfn')
    
      22install="${pkgname%-*}".install
    
      23source=('neatmkfn::git+https://github.com/aligrudi/neatmkfn'
    
      24        'neatroff::git+https://github.com/aligrudi/neatroff'
    
      25        'neatroff_make::git+https://github.com/aligrudi/neatroff_make'
    
      26        'neatpost::git+https://github.com/aligrudi/neatpost'
    
      27        'neathyph::git+https://github.com/aksr/neatroff-hyph'
    
      28        'neateqn::git+https://github.com/aligrudi/neateqn'
    
      29        'neatrefer::git+https://github.com/aligrudi/neatrefer'
    
      30        'http://dev.rudi.ir/neatroff.pdf'
    
      31        'http://dev.rudi.ir/neateqn.pdf')
    
      32noextract=()
    
      33md5sums=('SKIP'
    
      34         'SKIP'
    
      35         'SKIP'
    
      36         'SKIP'
    
      37         'SKIP'
    
      38         'SKIP'
    
      39         'SKIP'
    
      40         'ada01d6183f58aeddd7c95a341f0de85'
    
      41         '1b50637775dc7ffe3ffa15504d5508aa')
    
      42sha1sums=('SKIP'
    
      43          'SKIP'
    
      44          'SKIP'
    
      45          'SKIP'
    
      46          'SKIP'
    
      47          'SKIP'
    
      48          'SKIP'
    
      49          '83f7c6bfeb091ebf0d21ed5125d94f8648334de1'
    
      50          '9fe8ad25994a8377c084db0783401b584773e5e4')
    
      51sha256sums=('SKIP'
    
      52            'SKIP'
    
      53            'SKIP'
    
      54            'SKIP'
    
      55            'SKIP'
    
      56            'SKIP'
    
      57            'SKIP'
    
      58            '4569b2ea774a96831f94064e017e9cae78e5fd95f3ea0b753a7887ef3a5e2b80'
    
      59            '438bc852b9f32f3172ff4d0a5ce7573e4b578c087cc8d2f5dedc9c60b9ba67b7')
    
      60
    
      61## Ghostscript Fonts Location:
    
      62FP="/usr/share/fonts/Type1/"
    
      63
    
      64## FONTS directory
    
      65FDIR=/usr/share/neatroff/font
    
      66
    
      67## MACROS directory
    
      68MDIR=/usr/share/neatroff/tmac
    
      69
    
      70## HYPHENATION FILES
    
      71HYPH=/usr/share/neatroff/hyph
    
      72
    
      73pkgver() {
    
      74	cd $srcdir/neatroff
    
      75	printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
    
      76}
    
      77
    
      78build() {
    
      79	cd "$srcdir/neatmkfn"
    
      80	make all
    
      81	mkdir fonts || return 0
    
      82
    
      83	## XXX: temporary fix until `gen.sh' is updated
    
      84	sed -i 's/NimbusSansNarrow-BoldOblique.afm/NimbusSansNarrow-BdOblique.afm/' gen.sh
    
      85
    
      86	./gen.sh $FP fonts
    
      87	sed -i 's|./mkfn|neatmkfn|g' gen.sh
    
      88	cd $srcdir/neatroff
    
      89	make all FDIR=$FDIR MDIR=$MDIR
    
      90	cd $srcdir/neatpost
    
      91	make all FDIR=$FDIR
    
      92	cd $srcdir/neateqn
    
      93	make all
    
      94	cd $srcdir/neatrefer
    
      95	make all
    
      96	cd $srcdir/neatroff_make/shape
    
      97	make all
    
      98}
    
      99
    
      100package() {
    
      101	cd $srcdir/neatmkfn
    
      102	install -Dm755 mkfn $pkgdir/usr/bin/neatmkfn
    
      103	install -Dm644 ../neatroff_make/man/neatmkfn.1 $pkgdir/usr/share/man/man1/neatmkfn.1
    
      104	install -Dm644 gen.sh $pkgdir/usr/share/doc/${pkgname%-*}/gen.sh
    
      105	install -Dm644 README $pkgdir/usr/share/doc/${pkgname%-*}/README.neatmkfn
    
      106	mkdir -p $pkgdir/usr/share/${pkgname%-*-*}/font/devutf/
    
      107	cp fonts/* $pkgdir/usr/share/${pkgname%-*-*}/font/devutf/
    
      108
    
      109	cd $srcdir/neatroff
    
      110	install -D -m755 roff $pkgdir/usr/bin/neatroff
    
      111	install -D -m644 README $pkgdir/usr/share/doc/${pkgname%-*}/README
    
      112	install -D -m644 ../neatroff.pdf $pkgdir/usr/share/doc/${pkgname%-*}/neatroff.pdf
    
      113	install -D -m644 ../neatroff_make/tmac/NOTICE $pkgdir/usr/share/licenses/${pkgname%-*}/NOTICE
    
      114	install -D -m644 ../neatroff_make/man/neatroff.1 $pkgdir/usr/share/man/man1/neatroff.1
    
      115	## copy neatroff macros
    
      116	mkdir -p $pkgdir/usr/share/${pkgname%-*-*}/tmac/
    
      117	cp -r ../neatroff_make/tmac/* $pkgdir/usr/share/${pkgname%-*-*}/tmac/
    
      118	rm -f $pkgdir/usr/share/${pkgname%-*-*}/tmac/NOTICE
    
      119
    
      120	cd $srcdir/neatpost
    
      121	install -D -m755 post $pkgdir/usr/bin/neatpost
    
      122	install -D -m755 pdf $pkgdir/usr/bin/neatpdf
    
      123	install -D -m644 README $pkgdir/usr/share/doc/${pkgname%-*}/README.neatpost
    
      124	install -D -m644 ../neatroff_make/man/neatpost.1 $pkgdir/usr/share/man/man1/neatpost.1
    
      125
    
      126	cd $srcdir/neateqn
    
      127	install -D -m755 eqn $pkgdir/usr/bin/neateqn
    
      128	install -D -m644 README $pkgdir/usr/share/doc/${pkgname%-*}/README.neateqn
    
      129	install -D -m644 ../neateqn.pdf $pkgdir/usr/share/doc/${pkgname%-*}/neateqn.pdf
    
      130	install -D -m644 ../neatroff_make/man/neateqn.1 $pkgdir/usr/share/man/man1/neateqn.1
    
      131
    
      132	cd $srcdir/neatrefer
    
      133	install -D -m755 refer $pkgdir/usr/bin/neatrefer
    
      134	install -D -m644 README $pkgdir/usr/share/doc/${pkgname%-*}/README.neatrefer
    
      135	install -D -m644 ../neatroff_make/man/neatrefer.1 $pkgdir/usr/share/man/man1/neatrefer.1
    
      136
    
      137	cd $srcdir/neatroff_make/shape
    
      138	install -D -m755 shape $pkgdir/usr/bin/neatshape
    
      139
    
      140	## copy hyphenation files
    
      141	mkdir -p $pkgdir/$HYPH
    
      142	cp -a $srcdir/neathyph/hyph/* "$pkgdir/$HYPH"
    
      143
    
      144	## copy hyphenation macro file
    
      145	install -m644 $srcdir/neathyph/tmac/tmac.hyph $pkgdir/$MDIR/tmac.hyph
    
      146}
    
      147

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2