occt-webgl-viewer
LOW
maintainer greyltc
0 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package builds from source hosted on official project forges (Open CASCADE's gitweb and GNU Savannah), which are legitimate but not on the analyzer's whitelist; no untrusted executables or remote code execution.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from source hosted on official project forges (Open CASCADE's gitweb and GNU Savannah), which are legitimate but not on the analyzer's whitelist; no untrusted executables or remote code execution.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:22
"opencascade-${pkgver}.tgz::https://git.dev.opencascade.org/gitweb/?p=occt.git;a=snapshot;h=refs/tags/${_pkgver};sf=tgz"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Grey Christoforo <first name at last name dot net>
2
3
pkgname=occt-webgl-viewer
4
pkgver=7.5.0
5
_ftver=2.10.4 # freetype version to use here
6
_pkgver=V${pkgver//./_}
7
pkgrel=1
8
pkgdesc="Open CASCADE Technology WebGL 3D Viewer for rendering 3d models on a website"
9
arch=(x86_64)
10
url="https://www.opencascade.org"
11
license=(LGPL custom)
12
depends=()
13
makedepends=(
14
tk
15
gl2ps
16
emscripten
17
cmake
18
ninja
19
)
20
options=(!buildflags)
21
source=(
22
"opencascade-${pkgver}.tgz::https://git.dev.opencascade.org/gitweb/?p=occt.git;a=snapshot;h=refs/tags/${_pkgver};sf=tgz"
23
"freetype-${_ftver}.tar.xz::https://download-mirror.savannah.gnu.org/releases/freetype/freetype-${_ftver}.tar.xz"
24
fix-install-dir-references.patch
25
)
26
27
sha256sums=('c8df7d23051b86064f61299a5f7af30004c115bdb479df471711bab0c7166654'
28
'86a854d8905b19698bbc8f23b860bc104246ce4854dcea8e3b0fb21284f75784'
29
'afb584aa453993ae8d9e2b983594558531ede735a5892754b812be30650c9fb5')
30
31
prepare() {
32
cd occt-${_pkgver}
33
patch -Np1 -i "${srcdir}/fix-install-dir-references.patch"
34
}
35
36
build() {
37
source /etc/profile.d/emscripten.sh
38
39
msg2 "building freetype for the web"
40
pushd freetype-${_ftver}
41
emconfigure ./configure
42
emcmake cmake -Wno-dev \
43
-G Ninja \
44
-B ft_build \
45
-S .
46
DESTDIR=install emmake cmake --build ft_build -- install
47
popd
48
49
msg2 "building occt for the web"
50
pushd occt-${_pkgver}
51
emcmake cmake -Wno-dev \
52
-D BUILD_MODULE_Draw=NO \
53
-D BUILD_LIBRARY_TYPE=Static \
54
-D BUILD_DOC_Overview=NO \
55
-D 3RDPARTY_FREETYPE_LIBRARY="${srcdir}/freetype-${_ftver}/ft_build/install/usr/local/lib/libfreetype.a" \
56
-D 3RDPARTY_FREETYPE_LIBRARY_DIR="${srcdir}/freetype-${_ftver}/ft_build/install/usr/local/lib" \
57
-D 3RDPARTY_FREETYPE_INCLUDE_DIR_ft2build="${srcdir}/freetype-${_ftver}/ft_build/install/usr/local/include/freetype2" \
58
-D 3RDPARTY_FREETYPE_INCLUDE_DIR_freetype2="${srcdir}/freetype-${_ftver}/ft_build/install/usr/local/include" \
59
-G Ninja \
60
-B occt_build \
61
-S .
62
DESTDIR=install emmake cmake --build occt_build -- install
63
#emmake cmake --build occt_build
64
#pushd occt_build
65
#emmake ninja install
66
#emmake make DESTDIR="${srcdir}/occt-${_pkgver}/install" install
67
#popd
68
popd
69
70
msg2 "building WebGL viewer example"
71
pushd occt-${_pkgver}/samples/webgl
72
emcmake cmake -Wno-dev \
73
-D freetype_DIR="${srcdir}/freetype-${_ftver}/ft_build/install/usr/local/lib/cmake/freetype" \
74
-D OpenCASCADE_DIR="${srcdir}/occt-${_pkgver}/occt_build/install/usr/local/lib/cmake/opencascade" \
75
-G Ninja \
76
-B web_build \
77
-S .
78
emmake cmake --build web_build
79
}
80
81
package() {
82
source /etc/profile.d/emscripten.sh
83
cd occt-${_pkgver}
84
85
pushd samples/webgl
86
DESTDIR="${pkgdir}/opt/${pkgname}" emmake cmake --build web_build -- install
87
popd
88
89
install -m644 -Dt "${pkgdir}/opt/${pkgname}/usr/local/samples" data/occ/Ball.brep
90
cp "${pkgdir}/opt/${pkgname}"/usr/local/*.html "${pkgdir}/opt/${pkgname}"/usr/local/index.html
91
92
install -m644 -Dt "${pkgdir}/usr/share/licenses/${pkgname}" LICENSE_LGPL_21.txt
93
install -m644 -Dt "${pkgdir}/usr/share/licenses/${pkgname}" OCCT_LGPL_EXCEPTION.txt
94
}
95
96
# vim:set ts=2 sw=2 et:
97
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |