python-gdal-libkml-filegdb

LOW

maintainer alireza6677 7 votes base gdal-libkml-filegdb scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The source is a standard upstream tarball from the official OSGeo download server, which is a legitimate and expected source for GDAL; the host is not whitelisted but is plausibly official, and the package builds from verified source code with a provided b2sum.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a standard upstream tarball from the official OSGeo download server, which is a legitimate and expected source for GDAL; the host is not whitelisted but is plausibly official, and the package builds from verified source code with a provided b2sum.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:26 source=(https://download.osgeo.org/${_pkgbase}/${pkgver}/${_pkgbase}-${pkgver}.tar.xz)

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Alireza S.N. <alireza6677@gmail.com>
    
      2# Maintainer: Jaroslav Lichtblau <svetlemodry@archlinux.org>
    
      3# Maintainer: Bruno Pagani <archange@archlinux.org>
    
      4# Contributor: dibblethewrecker dibblethewrecker.at.jiwe.dot.org
    
      5# Contributor: William Rea <sillywilly@gmail.com>
    
      6
    
      7_pkgbase=gdal
    
      8pkgbase=gdal-libkml-filegdb
    
      9pkgname=(gdal-libkml-filegdb python-gdal-libkml-filegdb)
    
      10pkgver=3.13.3
    
      11pkgrel=1
    
      12provides=("gdal=${pkgver}")
    
      13pkgdesc="A translator library for raster and vector geospatial data formats (with libkml and filegdb support)"
    
      14arch=(x86_64)
    
      15url="https://gdal.org/"
    
      16license=(custom)
    
      17makedepends=(cmake opencl-headers python-setuptools python-numpy
    
           proj arrow blosc cfitsio curl crypto++ libdeflate expat libfreexl
    
           libgeotiff geos giflib libheif hdf5 libjpeg-turbo json-c libjxl xz
    
           libxml2 lz4 mariadb-libs netcdf unixodbc ocl-icd openexr openjpeg2
    
           openssl pcre2 libpng podofo poppler postgresql-libs qhull
    
           libspatialite sqlite swig libtiff libwebp xerces-c zlib zstd libaec libkml-git)
    
      23# armadillo brunsli lerc libkml qb3 rasterlite2 sfcgal tiledb
    
      24# ogdi
    
      25changelog=$_pkgbase.changelog
    
      26source=(https://download.osgeo.org/${_pkgbase}/${pkgver}/${_pkgbase}-${pkgver}.tar.xz)
    
      27b2sums=('21e35a6318321155df27a2c55a4ca6b98f9a724ff7c5cb68866428ba6675aa017f21de1a3f1562cf506e288e23748520c87e0184a495147eb4d91ffc0e534c72')
    
      28
    
      29build() {
    
  alias python3=python3.14
    
#-DCMAKE_CXX_STANDARD=20 \
    
local site_packages=$(python -c "import site; print(site.getsitepackages()[0])")
    
cmake -B build -S $_pkgbase-$pkgver \
    
  -DCMAKE_INSTALL_PREFIX=/usr \
    
  -DENABLE_IPO=ON \
    
  -DBUILD_PYTHON_BINDINGS=ON \
    
  -DGDAL_ENABLE_PLUGINS=ON \
    
  -DGDAL_USE_ARROW=ON \
    
  -DGDAL_USE_BLOSC=ON \
    
  -DGDAL_USE_CFITSIO=ON \
    
  -DGDAL_USE_CURL=ON \
    
  -DGDAL_USE_CRYPTOPP=ON \
    
  -DGDAL_USE_DEFLATE=ON \
    
  -DGDAL_USE_EXPAT=ON \
    
  -DGDAL_USE_FREEXL=ON \
    
  -DGDAL_USE_GEOTIFF=ON \
    
  -DGDAL_USE_GEOS=ON \
    
  -DGDAL_USE_GIF=ON \
    
  -DGDAL_USE_HEIF=ON \
    
  -DGDAL_USE_HDF5=ON \
    
  -DGDAL_USE_ICONV=ON \
    
  -DGDAL_USE_JPEG=ON \
    
  -DGDAL_USE_JSONC=ON \
    
  -DGDAL_USE_JXL=ON \
    
  -DGDAL_USE_LIBLZMA=ON \
    
  -DGDAL_USE_LIBXML2=ON \
    
  -DGDAL_USE_LZ4=ON \
    
  -DGDAL_USE_MYSQL=ON \
    
  -DGDAL_USE_NETCDF=ON \
    
  -DGDAL_USE_ODBC=ON \
    
  -DGDAL_USE_OPENCL=ON \
    
  -DGDAL_USE_OPENEXR=ON \
    
  -DGDAL_USE_OPENJPEG=ON \
    
  -DGDAL_USE_OPENSSL=ON \
    
  -DGDAL_USE_PARQUET=ON \
    
  -DGDAL_USE_PCRE2=ON \
    
  -DGDAL_USE_PNG=ON \
    
  -DGDAL_USE_POPPLER=ON \
    
  -DGDAL_USE_POSTGRESQL=ON \
    
  -DGDAL_USE_QHULL=ON \
    
  -DGDAL_USE_SPATIALITE=ON \
    
  -DGDAL_USE_SQLITE3=ON \
    
  -DGDAL_USE_TIFF=ON \
    
  -DGDAL_USE_WEBP=ON \
    
  -DGDAL_USE_XERCESC=ON \
    
  -DGDAL_USE_ZLIB=ON \
    
  -DGDAL_USE_ZSTD=ON \
    
  -DGDAL_USE_LIBKML=ON \
    
  -DGDAL_USE_FileGDB=ON \
    
  -DFileGDB_INCLUDE_DIR=/usr/include/filegdb-api/ \
    
  -DFileGDB_LIBRARY=/usr/lib/libFileGDBAPI.so && \
    
make -C build -j $(nproc)
    
      83}
    
      84
    
      85package_gdal-libkml-filegdb () {
    
conflicts=('gdal')
    
local site_packages=$(python -c "import site; print(site.getsitepackages()[0])")
    
depends=(proj blosc crypto++ curl libdeflate expat libfreexl geos libgeotiff
    
         giflib libjpeg-turbo json-c xz libxml2 lz4 unixodbc ocl-icd openssl
    
         pcre2 libpng qhull libspatialite sqlite libtiff xerces-c zlib zstd libaec libkml-git filegdb-api)
    
optdepends=('arrow: Arrow/Parquet support'
    
            'cfitsio: FITS support'
    
            'hdf5: HDF5 support'
    
            'libheif: HEIF support'
    
            'libjxl: JPEG XL support'
    
            'mariadb-libs: MySQL support'
    
            'netcdf: netCDF support'
    
            'openexr: EXR support'
    
            'openjpeg2: JP2 support'
    
            'podofo: PDF support'
    
            'poppler: PDF support'
    
            'postgresql-libs: PostgreSQL support'
    
            'libwebp: WebP support')
    
      104
    
make -C build DESTDIR="${pkgdir}" install
    
install -Dm644 ${_pkgbase}-${pkgver}/LICENSE.TXT -t "${pkgdir}"/usr/share/licenses/$pkgbase/
    
# Move python stuff
    
mkdir -p {bin,lib}
    
mv "${pkgdir}"/usr/bin/*py bin
    
mv "${pkgdir}"/usr/lib/python* lib
    
      111}
    
      112
    
      113package_python-gdal-libkml-filegdb () {
    
pkgdesc="Python bindings for GDAL"
    
depends=("gdal-libkml-filegdb=$pkgver" 'python-numpy')
    
provides=("python-gdal=${pkgver}")
    
conflicts=('python-gdal')
    
      118
    
install -d "${pkgdir}"/usr/{bin,lib}
    
mv bin/* "${pkgdir}"/usr/bin
    
mv lib/* "${pkgdir}"/usr/lib
    
install -dm755 "${pkgdir}"/usr/share/licenses
    
ln -s $pkgbase "${pkgdir}"/usr/share/licenses/$pkgname
    
# byte-compile python modules since the CMake build does not do it.
    
local site_packages=$(python -c "import site; print(site.getsitepackages()[0])")
    
python -m compileall -o 0 -o 1 -o 2 --hardlink-dupes -s "${pkgdir}" "${pkgdir}"${site_packages}
    
      127}
    
      128

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 07:38:41	Medium	1