openfoam-com

maintainer carlosal1015 · 13 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The source is a tarball from a project-owned domain (dl.openfoam.com) used to build the software from source; this is normal AUR packaging behavior and not inherently dangerous.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from a project-owned domain (dl.openfoam.com) used to build the software from source; this is normal AUR packaging behavior and not inherently dangerous.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:23 source=(https://dl.${pkgname//-/.}/source/${pkgver}/${_dist}.tgz)

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Carlos Aznarán <caznaranl@uni.pe>
2# Contributor: Norbert Weber <norbert.weber_at_hzdr.de>
3# Contributor: Marc Olesen
4# Contributor: Xwang <xwaang1976@gmail.com>
5# Contributor: George Eleftheriou <eleftg>
6# Contributor: Andrew Fischer <andrew_at_apastron.co>
7# Contributor: <gucong43216@gmail.com>
8
9# Installs as (for example)
10# /opt/OpenFOAM/OpenFOAM-v2506
11
12_distname=OpenFOAM
13pkgname=${_distname,,}-com
14pkgver=v2606
15_dist=${_distname}-${pkgver}
16pkgrel=1
17pkgdesc="The open source CFD toolbox (www.openfoam.com)"
18arch=(i686 x86_64)
19url="https://www.${pkgname//-/.}"
20license=(GPL-3.0-or-later)
21install="${pkgname}.install"
22depends=(cgal fftw boost openmpi paraview scotch parmetis-git kahip) # petsc hypre
23source=(https://dl.${pkgname//-/.}/source/${pkgver}/${_dist}.tgz)
24md5sums=('35cbe9bc512fe087e4a472b1cb610063')
25
26prepare() {
27 if [ -n "$WM_PROJECT_DIR" ]; then
28 echo
29 echo -e "\e[1m\e[5m\e[31mPlease make sure that no OpenFOAM version is sourced in bashrc.\e[0m"
30 echo
31 return 1
32 fi
33
34 projectDir="${srcdir}/${_dist}"
35
36 # Generate and install the system preferences file
37 echo "# Preferences for arch-linux
38export WM_COMPILER_TYPE=system
39export WM_MPLIB=SYSTEMOPENMPI
40# End" \
41 >"${projectDir}"/etc/prefs.sh
42
43 # Configure components.
44 # Use system values for boost/cgal, fftw, kahip, metis, paraview, scotch
45 # -petsc petsc-system -hypre hypre-system -mpfr mpfr-system -gmp gmp-system
46
47 "${projectDir}"/bin/tools/foamConfigurePaths \
48 -adios adios-system \
49 -boost boost-system \
50 -cgal cgal-system \
51 -fftw fftw-system \
52 -kahip kahip-system \
53 -metis metis-system \
54 -paraview paraview-system \
55 -scotch scotch-system \
56 ;
57}
58
59build() {
60 if [ -n "$WM_PROJECT_DIR" ]; then
61 echo
62 echo -e "\e[1m\e[5m\e[31mPlease make sure that no OpenFOAM version is sourced in bashrc.\e[0m"
63 echo
64 return 1
65 fi
66
67 projectDir="${srcdir}/${_dist}"
68 [ -f "$projectDir/etc/bashrc" ] || {
69 echo "No $projectDir/etc/bashrc found"
70 return 1
71 }
72
73 # Avoid external influence on the environment
74 export FOAM_CONFIG_MODE="o"
75 unset FOAM_SETTINGS
76
77 set +e # Turn errexit off
78
79 source "$projectDir"/etc/bashrc '' ||
80 echo "Ignore spurious sourcing error"
81
82 # it seems, the bashrc file destroys 'projectDir'
83 projectDir="${srcdir}/${_dist}"
84
85 set -e # Turn errexit back on
86 cd "$projectDir" || exit
87
88 # Dummy application for testing
89 #./applications/test/00-dummy/Allwmake
90
91 ./Allwmake -j -log=log.build
92
93 # Check log for this type of content:
94 #
95 # api = 2006
96 # patch = 1
97 # bin = 283 entries
98 # lib = 139 entries
99
100 [ -f log.build ] || {
101 echo "No log.build file - build failed entirely"
102 exit 1
103 }
104
105 bins="$(cat log.build | sed -ne 's/.*bin *= *\([0-9][0-9]*\).*/\1/p;' | sed -ne '$p')"
106 libs="$(cat log.build | sed -ne 's/.*lib *= *\([0-9][0-9]*\).*/\1/p;' | sed -ne '$p')"
107
108 if [ "${bins:=0}" = 0 ] || [ "${libs:=0}" = 0 ]; then
109 echo
110 echo "Build failed with $bins executables and $libs libraries"
111 echo "Check the log.build file"
112 echo
113 exit 1
114 fi
115
116 # Remove intermediate build artifacts
117 rm -rf "${projectDir}/build"
118}
119
120package() {
121 cd ${srcdir}
122
123 # Installation directories
124 parentDir="${pkgdir}/opt/${_distname}"
125 projectDir="${parentDir}/${_dist}"
126
127 # Create destination directories
128 install -d "${parentDir}" "${pkgdir}"/etc/profile.d || return 1
129
130 # Copy package to pkgdir
131 cp -r "${srcdir}/${_dist}" "${parentDir}" || return 1
132
133 # Permission fixes - for system-wide install and use
134 chmod -R go+r "${pkgdir}"/opt
135 chmod -R 755 "${projectDir}"/bin
136 chmod -R 755 "${projectDir}"/etc
137
138 [ -e "${projectDir}"/ThirdParty ] ||
139 echo "system dependencies" >|"${projectDir}"/ThirdParty
140
141 # create aliases
142 echo "alias of='source /opt/${_distname}/${_dist}/etc/bashrc'" >>"${pkgdir}/etc/profile.d/${pkgname}.sh"
143 echo "alias paraFoam='paraFoam -builtin'" >>"${pkgdir}/etc/profile.d/${pkgname}.sh"
144}
145

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion