occt-webgl-viewer

maintainer greyltc · 0 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package builds from source hosted on official project forges (Open CASCADE's gitweb and GNU Savannah), which are legitimate but not on the analyzer's whitelist; no untrusted executables or remote code execution.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from source hosted on official project forges (Open CASCADE's gitweb and GNU Savannah), which are legitimate but not on the analyzer's whitelist; no untrusted executables or remote code execution.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:22 "opencascade-${pkgver}.tgz::https://git.dev.opencascade.org/gitweb/?p=occt.git;a=snapshot;h=refs/tags/${_pkgver};sf=tgz"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Grey Christoforo <first name at last name dot net>
2
3pkgname=occt-webgl-viewer
4pkgver=7.5.0
5_ftver=2.10.4 # freetype version to use here
6_pkgver=V${pkgver//./_}
7pkgrel=1
8pkgdesc="Open CASCADE Technology WebGL 3D Viewer for rendering 3d models on a website"
9arch=(x86_64)
10url="https://www.opencascade.org"
11license=(LGPL custom)
12depends=()
13makedepends=(
14tk
15gl2ps
16emscripten
17cmake
18ninja
19)
20options=(!buildflags)
21source=(
22"opencascade-${pkgver}.tgz::https://git.dev.opencascade.org/gitweb/?p=occt.git;a=snapshot;h=refs/tags/${_pkgver};sf=tgz"
23"freetype-${_ftver}.tar.xz::https://download-mirror.savannah.gnu.org/releases/freetype/freetype-${_ftver}.tar.xz"
24fix-install-dir-references.patch
25)
26
27sha256sums=('c8df7d23051b86064f61299a5f7af30004c115bdb479df471711bab0c7166654'
28 '86a854d8905b19698bbc8f23b860bc104246ce4854dcea8e3b0fb21284f75784'
29 'afb584aa453993ae8d9e2b983594558531ede735a5892754b812be30650c9fb5')
30
31prepare() {
32 cd occt-${_pkgver}
33 patch -Np1 -i "${srcdir}/fix-install-dir-references.patch"
34}
35
36build() {
37 source /etc/profile.d/emscripten.sh
38
39 msg2 "building freetype for the web"
40 pushd freetype-${_ftver}
41 emconfigure ./configure
42 emcmake cmake -Wno-dev \
43 -G Ninja \
44 -B ft_build \
45 -S .
46 DESTDIR=install emmake cmake --build ft_build -- install
47 popd
48
49 msg2 "building occt for the web"
50 pushd occt-${_pkgver}
51 emcmake cmake -Wno-dev \
52 -D BUILD_MODULE_Draw=NO \
53 -D BUILD_LIBRARY_TYPE=Static \
54 -D BUILD_DOC_Overview=NO \
55 -D 3RDPARTY_FREETYPE_LIBRARY="${srcdir}/freetype-${_ftver}/ft_build/install/usr/local/lib/libfreetype.a" \
56 -D 3RDPARTY_FREETYPE_LIBRARY_DIR="${srcdir}/freetype-${_ftver}/ft_build/install/usr/local/lib" \
57 -D 3RDPARTY_FREETYPE_INCLUDE_DIR_ft2build="${srcdir}/freetype-${_ftver}/ft_build/install/usr/local/include/freetype2" \
58 -D 3RDPARTY_FREETYPE_INCLUDE_DIR_freetype2="${srcdir}/freetype-${_ftver}/ft_build/install/usr/local/include" \
59 -G Ninja \
60 -B occt_build \
61 -S .
62 DESTDIR=install emmake cmake --build occt_build -- install
63 #emmake cmake --build occt_build
64 #pushd occt_build
65 #emmake ninja install
66 #emmake make DESTDIR="${srcdir}/occt-${_pkgver}/install" install
67 #popd
68 popd
69
70 msg2 "building WebGL viewer example"
71 pushd occt-${_pkgver}/samples/webgl
72 emcmake cmake -Wno-dev \
73 -D freetype_DIR="${srcdir}/freetype-${_ftver}/ft_build/install/usr/local/lib/cmake/freetype" \
74 -D OpenCASCADE_DIR="${srcdir}/occt-${_pkgver}/occt_build/install/usr/local/lib/cmake/opencascade" \
75 -G Ninja \
76 -B web_build \
77 -S .
78 emmake cmake --build web_build
79}
80
81package() {
82 source /etc/profile.d/emscripten.sh
83 cd occt-${_pkgver}
84
85 pushd samples/webgl
86 DESTDIR="${pkgdir}/opt/${pkgname}" emmake cmake --build web_build -- install
87 popd
88
89 install -m644 -Dt "${pkgdir}/opt/${pkgname}/usr/local/samples" data/occ/Ball.brep
90 cp "${pkgdir}/opt/${pkgname}"/usr/local/*.html "${pkgdir}/opt/${pkgname}"/usr/local/index.html
91
92 install -m644 -Dt "${pkgdir}/usr/share/licenses/${pkgname}" LICENSE_LGPL_21.txt
93 install -m644 -Dt "${pkgdir}/usr/share/licenses/${pkgname}" OCCT_LGPL_EXCEPTION.txt
94}
95
96# vim:set ts=2 sw=2 et:
97

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion