phono3py
MEDIUM
maintainer yuhldr
0 votes
scanned 2026-11-01 00:21:48.120785
Why flagged
`pip install <package>` fetches an unpinned package from PyPI at build time, outside source=() and makepkg's checksums.
Triggered rules
Medium
pip install of an external package
pip_install_external
`pip install <package>` fetches an unpinned package from PyPI at build time, outside source=() and makepkg's checksums.
-
PKGBUILD:42
_buildenv/bin/pip install --upgrade pip
PKGBUILD
1 offending line(s) highlighted
1
pkgname=('phono3py')
2
pkgver=4.8.2
3
pkgrel=1
4
pkgdesc="A simulation package of phonon-phonon interaction related properties"
5
arch=('any')
6
url="https://github.com/phonopy/phono3py"
7
license=('BSD')
8
depends=(
9
# "python-phonopy>=2.46.0"
10
# "python-phonopy<2.47"
11
"python-phonopy"
12
"python-scipy"
13
)
14
makedepends=(
15
python-pip
16
cmake
17
gcc
18
ninja
19
)
20
21
22
source=(
23
"git+https://github.com/phonopy/phono3py.git#tag=v${pkgver}"
24
# "lammps.patch"
25
)
26
sha256sums=(
27
'SKIP'
28
# 'SKIP'
29
)
30
31
prepare() {
32
cd "$srcdir"/phono3py
33
sed -i 's/cmake\.verbose/build.verbose/g' pyproject.toml
34
}
35
36
37
build() {
38
cd "$srcdir"/phono3py
39
rm -rf dist
40
41
python -m venv _buildenv
42
_buildenv/bin/pip install --upgrade pip
43
_buildenv/bin/pip install \
44
numpy \
45
"scikit-build-core" \
46
"nanobind<2.10.0" \
47
setuptools-scm \
48
build
49
50
_buildenv/bin/python -m build --wheel --no-isolation
51
}
52
53
54
package() {
55
cd "$srcdir"/phono3py
56
PIP_CONFIG_FILE=/dev/null pip install \
57
--isolated --root="$pkgdir" \
58
--ignore-installed --no-deps dist/*.whl
59
}
60
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Medium | 1 |
| 2026-10-31 00:07:41 | Medium | 1 |
| 2026-10-30 00:29:30 | Medium | 1 |
| 2026-10-29 00:13:55 | Medium | 1 |
| 2026-10-28 00:06:54 | Medium | 1 |
| 2026-10-27 00:23:28 | Medium | 1 |
| 2026-10-26 00:12:40 | Medium | 1 |
| 2026-10-25 00:20:48 | Medium | 1 |
| 2026-10-24 00:14:55 | Medium | 1 |
| 2026-10-23 00:02:19 | Medium | 1 |
| 2026-10-22 00:13:10 | Medium | 1 |
| 2026-10-21 00:12:50 | Medium | 1 |
| 2026-10-20 00:10:31 | Medium | 1 |
| 2026-10-19 00:03:55 | Medium | 1 |
| 2026-10-18 00:06:55 | Medium | 1 |
| 2026-10-17 00:21:55 | Medium | 1 |
| 2026-10-16 00:12:47 | Medium | 1 |
| 2026-10-15 00:28:05 | Medium | 1 |
| 2026-10-14 00:06:47 | Medium | 1 |
| 2026-10-13 00:23:45 | Medium | 1 |