python-gdal-libkml

maintainer alireza6677 · 1 votes · base gdal-libkml · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a standard tarball from the official OSGeo project download server, which is plausibly the project's own infrastructure; building from this source is normal AUR packaging practice despite the non-whitelisted host.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a standard tarball from the official OSGeo project download server, which is plausibly the project's own infrastructure; building from this source is normal AUR packaging practice despite the non-whitelisted host.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:25 source=(https://download.osgeo.org/gdal/${pkgver}/gdal-${pkgver}.tar.xz)

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Alireza S.N. <alireza6677@gmail.com>
    
      2# Maintainer: Jaroslav Lichtblau <svetlemodry@archlinux.org>
    
      3# Maintainer: Bruno Pagani <archange@archlinux.org>
    
      4# Contributor: dibblethewrecker dibblethewrecker.at.jiwe.dot.org
    
      5# Contributor: William Rea <sillywilly@gmail.com>
    
      6
    
      7pkgbase=gdal-libkml
    
      8pkgname=(gdal-libkml python-gdal-libkml)
    
      9pkgver=3.13.2
    
      10pkgrel=1
    
      11provides=("gdal=${pkgver}")
    
      12pkgdesc="A translator library for raster and vector geospatial data formats (with libkml support)"
    
      13arch=(x86_64)
    
      14url="https://gdal.org/"
    
      15license=(custom)
    
      16makedepends=(cmake opencl-headers python-setuptools python-numpy
    
           proj arrow blosc cfitsio curl crypto++ libdeflate expat libfreexl
    
           libgeotiff geos giflib libheif hdf5 libjpeg-turbo json-c libjxl xz
    
           libxml2 lz4 mariadb-libs netcdf unixodbc ocl-icd openexr openjpeg2
    
           openssl pcre2 libpng podofo poppler postgresql-libs qhull
    
           libspatialite sqlite swig libtiff libwebp xerces-c zlib zstd libaec libkml-git)
    
      22# armadillo brunsli lerc libkml qb3 rasterlite2 sfcgal tiledb
    
      23# ogdi
    
      24changelog=gdal.changelog
    
      25source=(https://download.osgeo.org/gdal/${pkgver}/gdal-${pkgver}.tar.xz)
    
      26b2sums=('6c22f3a19b28c67c03db83b8138283955371d1a939a1cfdeadd2fa646fa8fb760961f227ba4c819cb2386bc372371352a8c5e45c35ed552d91738590cee22013')
    
      27
    
      28build() {
    
  #-DCMAKE_CXX_STANDARD=20 \
    
cmake -B build -S gdal-$pkgver \
    
  -DCMAKE_INSTALL_PREFIX=/usr \
    
  -DENABLE_IPO=ON \
    
  -DBUILD_PYTHON_BINDINGS=ON \
    
  -DGDAL_ENABLE_PLUGINS=ON \
    
  -DGDAL_USE_ARROW=ON \
    
  -DGDAL_USE_BLOSC=ON \
    
  -DGDAL_USE_CFITSIO=ON \
    
  -DGDAL_USE_CURL=ON \
    
  -DGDAL_USE_CRYPTOPP=ON \
    
  -DGDAL_USE_DEFLATE=ON \
    
  -DGDAL_USE_EXPAT=ON \
    
  -DGDAL_USE_FREEXL=ON \
    
  -DGDAL_USE_GEOTIFF=ON \
    
  -DGDAL_USE_GEOS=ON \
    
  -DGDAL_USE_GIF=ON \
    
  -DGDAL_USE_HEIF=ON \
    
  -DGDAL_USE_HDF5=ON \
    
  -DGDAL_USE_ICONV=ON \
    
  -DGDAL_USE_JPEG=ON \
    
  -DGDAL_USE_JSONC=ON \
    
  -DGDAL_USE_JXL=ON \
    
  -DGDAL_USE_LIBLZMA=ON \
    
  -DGDAL_USE_LIBXML2=ON \
    
  -DGDAL_USE_LZ4=ON \
    
  -DGDAL_USE_MYSQL=ON \
    
  -DGDAL_USE_NETCDF=ON \
    
  -DGDAL_USE_ODBC=ON \
    
  -DGDAL_USE_OPENCL=ON \
    
  -DGDAL_USE_OPENEXR=ON \
    
  -DGDAL_USE_OPENJPEG=ON \
    
  -DGDAL_USE_OPENSSL=ON \
    
  -DGDAL_USE_PARQUET=ON \
    
  -DGDAL_USE_PCRE2=ON \
    
  -DGDAL_USE_PNG=ON \
    
  -DGDAL_USE_POPPLER=ON \
    
  -DGDAL_USE_POSTGRESQL=ON \
    
  -DGDAL_USE_QHULL=ON \
    
  -DGDAL_USE_SPATIALITE=ON \
    
  -DGDAL_USE_SQLITE3=ON \
    
  -DGDAL_USE_TIFF=ON \
    
  -DGDAL_USE_WEBP=ON \
    
  -DGDAL_USE_XERCESC=ON \
    
  -DGDAL_USE_ZLIB=ON \
    
  -DGDAL_USE_ZSTD=ON \
    
  -DGDAL_USE_LIBKML=ON \
    
  -DGDAL_USE_FILEGDB=OFF \
    
  -DOGR_ENABLE_DRIVER_FILEGDB=OFF
    
make -C build -j $(nproc)
    
      79}
    
      80
    
      81package_gdal-libkml () {
    
conflicts=('gdal')
    
depends=(proj blosc crypto++ curl libdeflate expat libfreexl geos libgeotiff
    
         giflib libjpeg-turbo json-c xz libxml2 lz4 unixodbc ocl-icd openssl
    
         pcre2 libpng qhull libspatialite sqlite libtiff xerces-c zlib zstd libaec libkml-git)
    
optdepends=('arrow: Arrow/Parquet support'
    
            'cfitsio: FITS support'
    
            'hdf5: HDF5 support'
    
            'libheif: HEIF support'
    
            'libjxl: JPEG XL support'
    
            'mariadb-libs: MySQL support'
    
            'netcdf: netCDF support'
    
            'openexr: EXR support'
    
            'openjpeg2: JP2 support'
    
            'podofo: PDF support'
    
            'poppler: PDF support'
    
            'postgresql-libs: PostgreSQL support'
    
            'libwebp: WebP support')
    
      99
    
make -C build DESTDIR="${pkgdir}" install
    
install -Dm644 gdal-${pkgver}/LICENSE.TXT -t "${pkgdir}"/usr/share/licenses/gdal/
    
# Move python stuff
    
mkdir -p {bin,lib}
    
mv "${pkgdir}"/usr/bin/*py bin
    
mv "${pkgdir}"/usr/lib/python* lib
    
      106}
    
      107
    
      108package_python-gdal-libkml () {
    
pkgdesc="Python bindings for GDAL"
    
depends=("gdal-libkml=$pkgver" 'python-numpy')
    
provides=("python-gdal=${pkgver}")
    
conflicts=('python-gdal')
    
      113
    
install -d "${pkgdir}"/usr/{bin,lib}
    
mv bin/* "${pkgdir}"/usr/bin
    
mv lib/* "${pkgdir}"/usr/lib
    
install -dm755 "${pkgdir}"/usr/share/licenses
    
ln -s gdal "${pkgdir}"/usr/share/licenses/$pkgname
    
# byte-compile python modules since the CMake build does not do it.
    
local site_packages=$(python -c "import site; print(site.getsitepackages()[0])")
    
python -m compileall -o 0 -o 1 -o 2 --hardlink-dupes -s "${pkgdir}" "${pkgdir}"${site_packages}
    
      122}
    
      123

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-08-03 00:08
@@ -6,7 +6,7 @@
 
 pkgbase=gdal-libkml
 pkgname=(gdal-libkml python-gdal-libkml)
-pkgver=3.13.1
+pkgver=3.13.2
 pkgrel=1
 provides=("gdal=${pkgver}")
 pkgdesc="A translator library for raster and vector geospatial data formats (with libkml support)"
@@ -23,7 +23,7 @@
 # ogdi
 changelog=gdal.changelog
 source=(https://download.osgeo.org/gdal/${pkgver}/gdal-${pkgver}.tar.xz)
-b2sums=('582bea82ed21059c8b3348f91806842f0ee5337e056c8270b48a2478176036e1e34de6d9f5ebaa2ce16c7569fa36663c1bad26861161ab0e78712313fe61b407')
+b2sums=('6c22f3a19b28c67c03db83b8138283955371d1a939a1cfdeadd2fa646fa8fb760961f227ba4c819cb2386bc372371352a8c5e45c35ed552d91738590cee22013')
 
 build() {
     #-DCMAKE_CXX_STANDARD=20 \

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 21:28:26	MEDIUM	1
2026-06-19 19:07:35	CLEAN	2
2026-06-18 18:55:24	CLEAN	2
2026-06-18 16:11:54	MEDIUM	1