polylib
LOW
maintainer hv15
1 votes
scanned 2026-11-01 00:21:48.120785
Why flagged
The source is a tarball from the project's official academic host for building the library itself; this is a normal AUR build pattern, and the host, while not whitelisted, is plausibly the project's own.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's official academic host for building the library itself; this is a normal AUR build pattern, and the host, while not whitelisted, is plausibly the project's own.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:11
source=("http://icps.u-strasbg.fr/polylib/polylib_src/$pkgname-$pkgver.tar.gz"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Hans-Nikolai Viessmann <hv15 AT hw.ac.uk>
2
# Category: science
3
pkgname=('polylib' 'polylib-gmp')
4
pkgbase='polylib'
5
pkgver='6.01'
6
pkgrel=1
7
pkgdesc='A library of polyhedral functions'
8
arch=('x86_64')
9
url='http://icps.u-strasbg.fr/polylib/'
10
license=('GPL-3.0-or-later')
11
source=("http://icps.u-strasbg.fr/polylib/polylib_src/$pkgname-$pkgver.tar.gz"
12
'fix-tests.patch')
13
sha256sums=('ba2f42aa2b342a565c346e717c4a4bdc08c16ca4d113eda6a7d4e95d978343d3'
14
'8c51bb4e15ae4c4685dd53dbb0e0bf8ff89c7a98b79bd85ed3a1f03f821b1215')
15
16
prepare() {
17
cd "$srcdir/$pkgbase-$pkgver"
18
19
# resolves issues with testCompressParms functions being
20
# defined after the main function...
21
patch -p1 < $srcdir/fix-tests.patch
22
}
23
24
build() {
25
cd "$srcdir/$pkgbase-$pkgver"
26
27
msg "compiling normal version of Polylib"
28
[ -d "polylib" ] || mkdir "polylib"
29
cd polylib
30
../configure --prefix=/usr --without-libgmp
31
make
32
33
cd ..
34
msg "compiling GMP version of Polylib"
35
[ -d "polylibgmp" ] || mkdir "polylibgmp"
36
cd polylibgmp
37
../configure --prefix=/usr --with-libgmp
38
make
39
}
40
41
check() {
42
cd "$srcdir/$pkgbase-$pkgver"
43
44
cd polylib
45
make check
46
47
cd ../polylibgmp
48
make check
49
}
50
51
package_polylib() {
52
depends=('glibc')
53
provides=('libpolylib32.so' 'libpolylib64.so')
54
55
cd "$srcdir/$pkgbase-$pkgver/polylib"
56
make DESTDIR="$pkgdir" install
57
}
58
59
package_polylib-gmp() {
60
depends=('glibc' 'gmp' "polylib>=$pkgver")
61
provides=('libpolylibgmp.so')
62
63
cd "$srcdir/$pkgbase-$pkgver/polylibgmp"
64
make DESTDIR="$pkgdir" install-exec
65
66
cd "$pkgdir"
67
# Nasty rename to ensure we can co-exist with polylib
68
mv usr/bin/c2p usr/bin/c2p-gmp
69
mv usr/bin/disjoint_union_adj usr/bin/disjoint_union_adj-gmp
70
mv usr/bin/disjoint_union_sep usr/bin/disjoint_union_sep-gmp
71
mv usr/bin/ehrhart_lower_bound usr/bin/ehrhart_lower_bound-gmp
72
mv usr/bin/ehrhart_quick_apx usr/bin/ehrhart_quick_apx-gmp
73
mv usr/bin/ehrhart_upper_bound usr/bin/ehrhart_upper_bound-gmp
74
mv usr/bin/findv usr/bin/findv-gmp
75
mv usr/bin/r2p usr/bin/r2p-gmp
76
}
77
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |