python-paddlepaddle-cuda-git
python-paddlepaddle-git
scanned 2026-09-17 00:27:14.276658
The pip install is used to install built wheel files from the project's own source code, not external packages; the flagged pattern is a false positive as it's part of the normal build process.
Triggered rules
pip_install_external
`pip install <package>` fetches an unpinned package from PyPI at build time, outside source=() and makepkg's checksums. Severity reduced: python-* packages routinely use pip.
-
PKGBUILD:109
PIP_CONFIG_FILE=/dev/null find "${srcdir}/build-cuda" -type f -name "*.whl" -exec pip install --isolated --root="${pkgdir}" --ignore-installed --no-deps {} \; -
PKGBUILD:125
PIP_CONFIG_FILE=/dev/null find "${srcdir}/build" -type f -name "*.whl" -exec pip install --isolated --root="${pkgdir}" --ignore-installed --no-deps {} \;
llm_review
An AI model (qwen/qwen3-235b-a22b-07-25) reviewed this and agrees it is LOW (confidence 95%): The pip install is used to install built wheel files from the project's own source code, not external packages; the flagged pattern is a false positive as it's part of the normal build process.
PKGBUILD
2 offending line(s) highlighted# Maintainer: Butui Hu <hot123tea123@gmail.com>
# cuda 11 supports Pascal, Volta,Turing, Ampere
# see also https://arnon.dk/matching-sm-architectures-arch-and-gencode-for-various-nvidia-cards
# adjust this list according to your target device
_CUDA_ARCH_LIST="60;61;62;70;72;75;80;86"
_pkgname=Paddle
pkgname=('python-paddlepaddle-git' 'python-paddlepaddle-cuda-git')
_pkgver=2.2.1
pkgver=2.2.1.r33234.8da9eff4e49
pkgrel=2
pkgdesc='PArallel Distributed Deep LEarning: Machine Learning Framework from Industrial Practice'
arch=('x86_64')
url='http://www.paddlepaddle.org'
license=('Apache')
depends=(
blas
python-astor
python-decorator
python-numpy
python-pillow
python-protobuf
python-requests
python-six
)
makedepends=(
cmake
cuda
cudnn
git
nccl
patchelf
python-pip
python-setuptools
python-wheel
swig
wget
)
source=("${_pkgname}::git+https://github.com/PaddlePaddle/Paddle.git")
sha512sums=('SKIP')
pkgver() {
cd ${_pkgname}
printf "%s.r%s.%s" "${_pkgver}" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
}
prepare() {
# improve the file descriptors limit to avoid "Too many open files" error
ulimit -n 4096
# use the same version of system's protobuf
# always check https://github.com/PaddlePaddle/Paddle/blob/develop/cmake/external/protobuf.cmake
# to make sure which protobuf git commit is used
_protobuf_version=$(protoc --version|cut -f 2 -d ' ')
sed -i "s,9f75c5aa851cd877fb0d93ccc31b8567a6706546,v${_protobuf_version}," "${_pkgname}/cmake/external/protobuf.cmake"
# set CUDA_HOME for dgc building
sed -i 's,BUILD_COMMAND make -j $(nproc),BUILD_COMMAND make CUDA_HOME=/opt/cuda,' "${_pkgname}/cmake/external/dgc.cmake"
# fix std::move error, see also https://github.com/PaddlePaddle/Paddle/issues/26878
find "${_pkgname}" -type f -name CMakeLists.txt -exec sed -i -e '$aset(CMAKE_CXX_FLAGS "${CMAKE_CXX_FLAGS} -Wno-error=pessimizing-move")' {} \;
# fix range-loop-construct
find "${_pkgname}" -type f -name CMakeLists.txt -exec sed -i -e '$aset(CMAKE_CXX_FLAGS "${CMAKE_CXX_FLAGS} -Wno-error=range-loop-construct")' {} \;
# fix #include <cstddef>
sed -i 's,#include <cstdint>,#include <cstdint>\n#include <cstddef>,' "${_pkgname}/paddle/fluid/memory/detail/memory_block.h"
}
build() {
cmake_opts=(
-DCMAKE_INSTALL_PREFIX=/usr
-DCMAKE_SKIP_INSTALL_RPATH=ON
-DWITH_AVX=ON
-DWITH_DISTRIBUTE=OFF
-DWITH_MKL=OFF
-DWITH_PYTHON=ON
-DWITH_SYSTEM_BLAS=ON
-DWITH_TESTING=OFF
)
# building with CUDA
cmake -B "${srcdir}/build-cuda" \
-S "${srcdir}/${_pkgname}" \
${cmake_opts[@]} \
-DCUDA_ARCH_BIN=${_CUDA_ARCH_LIST} \
-DCUDA_ARCH_NAME="Manual" \
-DWITH_GPU=ON
make -C "${srcdir}/build-cuda"
# building without CUDA
cmake -B "${srcdir}/build" \
-S "${srcdir}/${_pkgname}" \
${cmake_opts[@]} \
-DWITH_GPU=OFF
make -C "${srcdir}/build"
}
package_python-paddlepaddle-cuda-git() {
pkgdesc="${pkgdesc} (with CUDA)"
depends+=(
cuda
cudnn
nccl
)
provides=(
python-paddlepaddle=${_pkgver}
python-paddlepaddle-cuda=${_pkgver}
)
conflicts=(
python-paddlepaddle
python-paddlepaddle-cuda
)
PIP_CONFIG_FILE=/dev/null find "${srcdir}/build-cuda" -type f -name "*.whl" -exec pip install --isolated --root="${pkgdir}" --ignore-installed --no-deps {} \;
python -O -m compileall "${pkgdir}"
# remove unneeded libs
rm -rfv "${pkgdir}/usr/lib/python$(get_pyver)/site-packages/paddle/libs"
rm -vf ${pkgdir}/usr/lib/python$(get_pyver)/site-packages/_foo.*
# remove rpath
find "${pkgdir}/usr/lib" -type f -name "*.so" -exec patchelf --remove-rpath {} \;
}
package_python-paddlepaddle-git() {
provides=(
python-paddlepaddle=${_pkgver}
)
conflicts=(
python-paddlepaddle
)
PIP_CONFIG_FILE=/dev/null find "${srcdir}/build" -type f -name "*.whl" -exec pip install --isolated --root="${pkgdir}" --ignore-installed --no-deps {} \;
python -O -m compileall "${pkgdir}"
# remove unneeded libs
rm -rfv "${pkgdir}/usr/lib/python$(get_pyver)/site-packages/paddle/libs"
rm -vf ${pkgdir}/usr/lib/python$(get_pyver)/site-packages/_foo.*
# remove rpath
find "${pkgdir}/usr/lib" -type f -name "*.so" -exec patchelf --remove-rpath {} \;
}
# vim:set ts=2 sw=2 et:
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |