python-paddlepaddle-git

maintainer orphaned · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The pip install is used to install built wheel files from the project's own source code, not external packages; the flagged pattern is a false positive as it's part of the normal build process.

Triggered rules

LOW pip install of an external package pip_install_external

`pip install <package>` fetches an unpinned package from PyPI at build time, outside source=() and makepkg's checksums. Severity reduced: python-* packages routinely use pip.

PKGBUILD:109 PIP_CONFIG_FILE=/dev/null find "${srcdir}/build-cuda" -type f -name "*.whl" -exec pip install --isolated --root="${pkgdir}" --ignore-installed --no-deps {} \;
PKGBUILD:125 PIP_CONFIG_FILE=/dev/null find "${srcdir}/build" -type f -name "*.whl" -exec pip install --isolated --root="${pkgdir}" --ignore-installed --no-deps {} \;

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-07-25) reviewed this and agrees it is LOW (confidence 95%): The pip install is used to install built wheel files from the project's own source code, not external packages; the flagged pattern is a false positive as it's part of the normal build process.

PKGBUILD

2 offending line(s) highlighted

      1# Maintainer: Butui Hu <hot123tea123@gmail.com>
    
      2
    
      3# cuda 11 supports Pascal， Volta，Turing, Ampere
    
      4# see also https://arnon.dk/matching-sm-architectures-arch-and-gencode-for-various-nvidia-cards
    
      5# adjust this list according to your target device
    
      6_CUDA_ARCH_LIST="60;61;62;70;72;75;80;86"
    
      7_pkgname=Paddle
    
      8pkgname=('python-paddlepaddle-git' 'python-paddlepaddle-cuda-git')
    
      9_pkgver=2.2.1
    
      10pkgver=2.2.1.r33234.8da9eff4e49
    
      11pkgrel=2
    
      12pkgdesc='PArallel Distributed Deep LEarning: Machine Learning Framework from Industrial Practice'
    
      13arch=('x86_64')
    
      14url='http://www.paddlepaddle.org'
    
      15license=('Apache')
    
      16depends=(
    
      17  blas
    
      18  python-astor
    
      19  python-decorator
    
      20  python-numpy
    
      21  python-pillow
    
      22  python-protobuf
    
      23  python-requests
    
      24  python-six
    
      25)
    
      26makedepends=(
    
      27  cmake
    
      28  cuda
    
      29  cudnn
    
      30  git
    
      31  nccl
    
      32  patchelf
    
      33  python-pip
    
      34  python-setuptools
    
      35  python-wheel
    
      36  swig
    
      37  wget
    
      38)
    
      39source=("${_pkgname}::git+https://github.com/PaddlePaddle/Paddle.git")
    
      40sha512sums=('SKIP')
    
      41
    
      42pkgver() {
    
      43  cd ${_pkgname}
    
      44  printf "%s.r%s.%s" "${_pkgver}" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
    
      45}
    
      46
    
      47prepare() {
    
      48  # improve the file descriptors limit to avoid "Too many open files" error
    
      49  ulimit -n 4096
    
      50  # use the same version of system's protobuf
    
      51  # always check https://github.com/PaddlePaddle/Paddle/blob/develop/cmake/external/protobuf.cmake
    
      52  # to make sure which protobuf git commit is used
    
      53  _protobuf_version=$(protoc --version|cut -f 2 -d ' ')
    
      54  sed -i "s,9f75c5aa851cd877fb0d93ccc31b8567a6706546,v${_protobuf_version}," "${_pkgname}/cmake/external/protobuf.cmake"
    
      55  # set CUDA_HOME for dgc building
    
      56  sed -i 's,BUILD_COMMAND make -j $(nproc),BUILD_COMMAND make CUDA_HOME=/opt/cuda,' "${_pkgname}/cmake/external/dgc.cmake"
    
      57  # fix std::move error, see also https://github.com/PaddlePaddle/Paddle/issues/26878
    
      58  find "${_pkgname}" -type f -name CMakeLists.txt -exec sed -i -e '$aset(CMAKE_CXX_FLAGS "${CMAKE_CXX_FLAGS} -Wno-error=pessimizing-move")' {} \;
    
      59  # fix range-loop-construct
    
      60  find "${_pkgname}" -type f -name CMakeLists.txt -exec sed -i -e '$aset(CMAKE_CXX_FLAGS "${CMAKE_CXX_FLAGS} -Wno-error=range-loop-construct")' {} \;
    
      61  # fix #include <cstddef>
    
      62  sed -i 's,#include <cstdint>,#include <cstdint>\n#include <cstddef>,' "${_pkgname}/paddle/fluid/memory/detail/memory_block.h"
    
      63}
    
      64
    
      65build() {
    
      66  cmake_opts=(
    
      67    -DCMAKE_INSTALL_PREFIX=/usr
    
      68    -DCMAKE_SKIP_INSTALL_RPATH=ON
    
      69    -DWITH_AVX=ON
    
      70    -DWITH_DISTRIBUTE=OFF
    
      71    -DWITH_MKL=OFF
    
      72    -DWITH_PYTHON=ON
    
      73    -DWITH_SYSTEM_BLAS=ON
    
      74    -DWITH_TESTING=OFF
    
      75)
    
      76
    
      77  # building with CUDA
    
      78  cmake -B "${srcdir}/build-cuda" \
    
      79    -S "${srcdir}/${_pkgname}" \
    
      80    ${cmake_opts[@]} \
    
      81    -DCUDA_ARCH_BIN=${_CUDA_ARCH_LIST} \
    
      82    -DCUDA_ARCH_NAME="Manual" \
    
      83    -DWITH_GPU=ON
    
      84  make -C "${srcdir}/build-cuda"
    
      85
    
      86  # building without CUDA
    
      87  cmake -B "${srcdir}/build" \
    
      88    -S "${srcdir}/${_pkgname}" \
    
      89    ${cmake_opts[@]} \
    
      90    -DWITH_GPU=OFF
    
      91  make -C "${srcdir}/build"
    
      92}
    
      93
    
      94package_python-paddlepaddle-cuda-git() {
    
      95  pkgdesc="${pkgdesc} (with CUDA)"
    
      96  depends+=(
    
      97    cuda
    
      98    cudnn
    
      99    nccl
    
      100  )
    
      101  provides=(
    
      102    python-paddlepaddle=${_pkgver}
    
      103    python-paddlepaddle-cuda=${_pkgver}
    
      104  )
    
      105  conflicts=(
    
      106    python-paddlepaddle
    
      107    python-paddlepaddle-cuda
    
      108  )
    
      109  PIP_CONFIG_FILE=/dev/null find "${srcdir}/build-cuda" -type f -name "*.whl" -exec pip install --isolated --root="${pkgdir}" --ignore-installed --no-deps {} \;
    
      110  python -O -m compileall "${pkgdir}"
    
      111  # remove unneeded libs
    
      112  rm -rfv "${pkgdir}/usr/lib/python$(get_pyver)/site-packages/paddle/libs"
    
      113  rm -vf ${pkgdir}/usr/lib/python$(get_pyver)/site-packages/_foo.*
    
      114  # remove rpath
    
      115  find "${pkgdir}/usr/lib" -type f -name "*.so" -exec patchelf --remove-rpath {} \;
    
      116}
    
      117
    
      118package_python-paddlepaddle-git() {
    
      119  provides=(
    
      120    python-paddlepaddle=${_pkgver}
    
      121  )
    
      122  conflicts=(
    
      123    python-paddlepaddle
    
      124  )
    
      125  PIP_CONFIG_FILE=/dev/null find "${srcdir}/build" -type f -name "*.whl" -exec pip install --isolated --root="${pkgdir}" --ignore-installed --no-deps {} \;
    
      126  python -O -m compileall "${pkgdir}"
    
      127  # remove unneeded libs
    
      128  rm -rfv "${pkgdir}/usr/lib/python$(get_pyver)/site-packages/paddle/libs"
    
      129  rm -vf ${pkgdir}/usr/lib/python$(get_pyver)/site-packages/_foo.*
    
      130  # remove rpath
    
      131  find "${pkgdir}/usr/lib" -type f -name "*.so" -exec patchelf --remove-rpath {} \;
    
      132}
    
      133# vim:set ts=2 sw=2 et:
    
      134

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2