python-pymupdf-layout-bin

MEDIUM

maintainer adamanteye 0 votes scanned 2026-08-22 15:17:41.736085

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:24 source=("LICENSE.PolyForm-Noncommercial-1.0.0::https://polyformproject.org/licenses/noncommercial/1.0.0.txt")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Xuelin Yang <xuelin@adamantyee.cc>
    
      2pkgname=python-pymupdf-layout-bin
    
      3_pypiname=pymupdf_layout
    
      4pkgver=1.28.0
    
      5pkgrel=1
    
      6pkgdesc='Layout analysis for PyMuPDF (binary wheel)'
    
      7arch=('x86_64' 'aarch64')
    
      8url='https://pymupdf.readthedocs.io/en/latest/pymupdf-layout/'
    
      9license=('custom:PolyForm-Noncommercial-1.0.0' 'custom:Artifex-Commercial')
    
      10depends=(
    
      11	"python-pymupdf=${pkgver}"
    
      12	'python-yaml'
    
      13	'python-numpy'
    
      14	'python-networkx'
    
      15	'python-onnxruntime'
    
      16)
    
      17makedepends=(
    
      18	'python-installer'
    
      19)
    
      20provides=("python-pymupdf-layout=${pkgver}")
    
      21conflicts=('python-pymupdf-layout')
    
      22_wheel_x86_64="${_pypiname}-${pkgver}-cp310-abi3-manylinux_2_28_x86_64.whl"
    
      23_wheel_aarch64="${_pypiname}-${pkgver}-cp310-abi3-manylinux_2_28_aarch64.whl"
    
      24source=("LICENSE.PolyForm-Noncommercial-1.0.0::https://polyformproject.org/licenses/noncommercial/1.0.0.txt")
    
      25source_x86_64=("${_wheel_x86_64}::https://files.pythonhosted.org/packages/56/3a/dc5ab8573300b0f1b7fb996aa33ce4683c27b190a8e8be6f18d80714183d/${_wheel_x86_64}")
    
      26source_aarch64=("${_wheel_aarch64}::https://files.pythonhosted.org/packages/0b/58/2607c539540ce261d05d2677c0d839b78a4191d328accc1d0e9385a06799/${_wheel_aarch64}")
    
      27noextract=("${_wheel_x86_64}" "${_wheel_aarch64}")
    
      28sha256sums=('ffcca38841adb694b6f380647e15f17c446a4d1656fed51a1e2041d064c94cc8')
    
      29sha256sums_x86_64=('a6bd191301570a0863d6e04418324e823d0fd7f18b4fe1db2b9e53e715d2f8ff')
    
      30sha256sums_aarch64=('35b98e1ce9382709622e03c34b57d1b51a155ceb3d9122f11f8e9b2aa4f1ee55')
    
      31
    
      32package() {
    
      33	local _wheel
    
      34	case "$CARCH" in
    
      35		x86_64)
    
      36			_wheel="${_wheel_x86_64}"
    
      37			;;
    
      38		aarch64)
    
      39			_wheel="${_wheel_aarch64}"
    
      40			;;
    
      41	esac
    
      42	python -m installer --destdir="$pkgdir" "$srcdir/${_wheel}"
    
      43	local _site_packages
    
      44	_site_packages="$(python -c 'import site; print(site.getsitepackages()[0])')"
    
      45	install -Dm644 LICENSE.PolyForm-Noncommercial-1.0.0 \
    
      46		"$pkgdir/usr/share/licenses/$pkgname/LICENSE.PolyForm-Noncommercial-1.0.0"
    
      47	install -Dm644 "$pkgdir/${_site_packages#/}/${_pypiname}-${pkgver}.dist-info/COPYING" \
    
      48		"$pkgdir/usr/share/licenses/$pkgname/COPYING"
    
      49}
    
      50

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-08-22 15:17
@@ -1,14 +1,14 @@
 # Maintainer: Xuelin Yang <xuelin@adamantyee.cc>
 pkgname=python-pymupdf-layout-bin
 _pypiname=pymupdf_layout
-pkgver=1.27.2.3
+pkgver=1.28.0
 pkgrel=1
 pkgdesc='Layout analysis for PyMuPDF (binary wheel)'
 arch=('x86_64' 'aarch64')
 url='https://pymupdf.readthedocs.io/en/latest/pymupdf-layout/'
 license=('custom:PolyForm-Noncommercial-1.0.0' 'custom:Artifex-Commercial')
 depends=(
-	'python-pymupdf=1.27.2.3'
+	"python-pymupdf=${pkgver}"
 	'python-yaml'
 	'python-numpy'
 	'python-networkx'
@@ -22,12 +22,12 @@
 _wheel_x86_64="${_pypiname}-${pkgver}-cp310-abi3-manylinux_2_28_x86_64.whl"
 _wheel_aarch64="${_pypiname}-${pkgver}-cp310-abi3-manylinux_2_28_aarch64.whl"
 source=("LICENSE.PolyForm-Noncommercial-1.0.0::https://polyformproject.org/licenses/noncommercial/1.0.0.txt")
-source_x86_64=("${_wheel_x86_64}::https://files.pythonhosted.org/packages/32/e9/7ce6eaf97cebd46c3808593282e9eb99a60cddd6183e25a636980d5c7986/${_wheel_x86_64}")
-source_aarch64=("${_wheel_aarch64}::https://files.pythonhosted.org/packages/84/87/bfdcca67346052943a4549814f2009b38f4d15ec025798cdf7dfa5f57c84/${_wheel_aarch64}")
+source_x86_64=("${_wheel_x86_64}::https://files.pythonhosted.org/packages/56/3a/dc5ab8573300b0f1b7fb996aa33ce4683c27b190a8e8be6f18d80714183d/${_wheel_x86_64}")
+source_aarch64=("${_wheel_aarch64}::https://files.pythonhosted.org/packages/0b/58/2607c539540ce261d05d2677c0d839b78a4191d328accc1d0e9385a06799/${_wheel_aarch64}")
 noextract=("${_wheel_x86_64}" "${_wheel_aarch64}")
 sha256sums=('ffcca38841adb694b6f380647e15f17c446a4d1656fed51a1e2041d064c94cc8')
-sha256sums_x86_64=('303b9414216dfaf711ec7d807b6f1e4c3e0a92bbb4569340fcedd9d5593d16ca')
-sha256sums_aarch64=('fcf03aa815cbceebdb3263dd6a190de4547c46b1d168928836ec38738afe127d')
+sha256sums_x86_64=('a6bd191301570a0863d6e04418324e823d0fd7f18b4fe1db2b9e53e715d2f8ff')
+sha256sums_aarch64=('35b98e1ce9382709622e03c34b57d1b51a155ceb3d9122f11f8e9b2aa4f1ee55')
 
 package() {
 	local _wheel

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-22 15:17:41	Medium	1
2026-06-19 19:07:35	Clean	2
2026-06-18 16:11:54	Medium	1