python-romanisim-doc

maintainer Universebenzene · 0 votes · base python-romanisim · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package builds from a source tarball on PyPI and a data file from stsci.box.com; the latter is a legitimate institutional host for a NASA-related project, and the file is data, not executable code.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from a source tarball on PyPI and a data file from stsci.box.com; the latter is a legitimate institutional host for a NASA-related project, and the file is data, not executable code.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:38 "https://stsci.box.com/shared/static/kqfolg2bfzqc4mjkgmujo06d3iaymahv.gz"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Astro Benzene <universebenzene at sina dot com>
2
3pkgbase=python-romanisim
4_pyname=${pkgbase#python-}
5pkgname=("python-${_pyname}" "python-${_pyname}-doc")
6pkgver=0.14.0
7pkgrel=1
8pkgdesc="Nancy Grace Roman Space Telescope WFI Simulator"
9arch=('i686' 'x86_64')
10url="https://romanisim.readthedocs.io"
11license=('BSD-3-Clause')
12makedepends=('python-setuptools-scm>=3.4'
13 'cython>=0.29.21'
14 'python-build'
15 'python-installer'
16 'python-numpy>=2.0.0'
17 'python-sphinx-automodapi'
18 'python-sphinx_rtd_theme'
19 'python-numpydoc'
20 'python-astropy-healpix'
21## 'python-astroquery'
22 'python-crds'
23 'python-galsim'
24 'python-photutils'
25 'python-roman-datamodels'
26 'graphviz') # wheel required by new setuptools; scipy <- photutils; gwcs <- roman
27# takes long time and needs big data
28# @pytest.mark.bigdata: ci_watson
29#checkdepends=(
30#'python-pytest-doctestplus'
31#'python-ci_watson'
32# 'python-pytest-xdist'
33# 'python-pytest-timeout'
34# 'python-defusedxml'
35# 'python-stpsf'
36# ) # galsim, roman-datamodels, crds, scipy <- photutils, astropy-healpix, astroquery
37source=("https://files.pythonhosted.org/packages/source/${_pyname:0:1}/${_pyname}/${_pyname}-${pkgver}.tar.gz"
38 "https://stsci.box.com/shared/static/kqfolg2bfzqc4mjkgmujo06d3iaymahv.gz"
39 )
40md5sums=('3ed1df89433abcf1f5248c545d0bb9e3'
41 'b5cc6fe3fe5c7ae4dfe413691338a05a')
42
43get_pyver() {
44 python -c "import sys; print('$1'.join(map(str, sys.version_info[:2])))"
45}
46
47build() {
48 cd ${srcdir}/${_pyname}-${pkgver}
49 python -m build --wheel --no-isolation
50
51 msg "Building Docs"
52 ln -rs ${srcdir}/${_pyname}-${pkgver}/${_pyname/-/_}*egg-info \
53 build/lib.linux-${CARCH}-cpython-$(get_pyver)/${_pyname/-/_}-${pkgver}-py$(get_pyver .).egg-info
54 PYTHONPATH="../build/lib.linux-${CARCH}-cpython-$(get_pyver)" make -C docs html
55}
56
57#check() {
58# cd ${srcdir}/${_pyname}-${pkgver}
59#
60# # deselect tests that may take long time
61## mkdir .crds
62## STPSF_PATH=${srcdir}/stpsf-data CRDS_PATH="${srcdir}/${_pyname}-${pkgver}/.crds" CRDS_SERVER_URL=https://roman-crds.stsci.edu pytest -vv -l -ra --color=yes -o console_output_style=count "build/lib.linux-${CARCH}-cpython-$(get_pyver)" -p xdist -n 4 --timeout 300 \
63# STPSF_PATH=${srcdir}/stpsf-data pytest -vv -l -ra --color=yes -o console_output_style=count "build/lib.linux-${CARCH}-cpython-$(get_pyver)" -p xdist -n 4 --timeout 300 \
64# --deselect=build/lib.linux-${CARCH}-cpython-$(get_pyver)/romanisim/tests/test_l3.py::test_scaling \
65# --deselect=build/lib.linux-${CARCH}-cpython-$(get_pyver)/romanisim/tests/test_psf.py::test_make_psf[args8-kwargs8-None] \
66# --deselect=build/lib.linux-${CARCH}-cpython-$(get_pyver)/romanisim/tests/test_psf.py::test_make_psf[args2-kwargs2-None] \
67# --deselect=build/lib.linux-${CARCH}-cpython-$(get_pyver)/romanisim/tests/test_psf.py::test_make_psf[args11-kwargs11-None] \
68# --deselect=build/lib.linux-${CARCH}-cpython-$(get_pyver)/romanisim/tests/test_catalog.py::test_make_gaia_stars \
69# --deselect=build/lib.linux-${CARCH}-cpython-$(get_pyver)/romanisim/tests/test_image.py::test_image_rendering \
70# --deselect=build/lib.linux-${CARCH}-cpython-$(get_pyver)/romanisim/tests/test_image.py::test_reference_file_crds_match[1] \
71# --deselect=build/lib.linux-${CARCH}-cpython-$(get_pyver)/romanisim/tests/test_image.py::test_psftypes_location[epsf] \
72# --deselect=build/lib.linux-${CARCH}-cpython-$(get_pyver)/romanisim/tests/test_linear.py::test_inverse_then_linearity \
73# --deselect=build/lib.linux-${CARCH}-cpython-$(get_pyver)/romanisim/tests/test_image.py::test_simulate_counts_generic \
74# --deselect=build/lib.linux-${CARCH}-cpython-$(get_pyver)/romanisim/tests/test_image.py::test_inject_source_into_image \
75# --deselect=build/lib.linux-${CARCH}-cpython-$(get_pyver)/romanisim/tests/test_image.py::test_add_objects \
76# --deselect=build/lib.linux-${CARCH}-cpython-$(get_pyver)/romanisim/tests/test_l3.py::test_simulate_cps \
77# --deselect=build/lib.linux-${CARCH}-cpython-$(get_pyver)/romanisim/tests/test_image.py::test_reference_file_crds_match[2] \
78# --deselect=build/lib.linux-${CARCH}-cpython-$(get_pyver)/romanisim/tests/test_image.py::test_simulate_counts \
79# --deselect=build/lib.linux-${CARCH}-cpython-$(get_pyver)/romanisim/tests/test_image.py::test_psftypes_similar[epsf] \
80# --deselect=build/lib.linux-${CARCH}-cpython-$(get_pyver)/romanisim/tests/test_image.py::test_simulate \
81# --deselect=build/lib.linux-${CARCH}-cpython-$(get_pyver)/romanisim/tests/test_image.py::test_fast_epsf \
82# --deselect=build/lib.linux-${CARCH}-cpython-$(get_pyver)/romanisim/tests/test_psf.py::test_make_psf[args12-kwargs12-position12] \
83# --deselect=build/lib.linux-${CARCH}-cpython-$(get_pyver)/romanisim/tests/test_l3.py::test_exptime_array \
84# --deselect=build/lib.linux-${CARCH}-cpython-$(get_pyver)/romanisim/tests/test_l3.py::test_simulate_vs_cps \
85# --deselect=build/lib.linux-${CARCH}-cpython-$(get_pyver)/romanisim/tests/test_wcs.py::test_wcs_crds_match
86#
87#
88## --deselect=romancal/stpipe/tests/test_core.py
89## || warning "Tests failed" # -vv -l -ra --color=yes -o console_output_style=count -p xdist -n 4 #
90#}
91
92package_python-romanisim() {
93 depends=('python>=3.11'
94 'python-asdf>=4.1.0'
95 'python-astropy-healpix>=1.1.2'
96 'python-astroquery>=0.4.11'
97 'python-crds>=13.0.2'
98 'python-defusedxml>=0.5.0'
99 'python-galsim>=2.5.1'
100 'python-roman-datamodels>=0.29.0'
101 'python-gwcs>=0.25.0'
102 'python-photutils>=2.3.0')
103 optdepends=('python-romanisiml-doc: Documentation for romanisim')
104 cd ${srcdir}/${_pyname}-${pkgver}
105
106 install -D -m644 LICENSE -t "${pkgdir}/usr/share/licenses/${pkgname}"
107 install -D -m644 README.md -t "${pkgdir}/usr/share/doc/${pkgname}"
108 python -m installer --destdir="${pkgdir}" dist/*.whl
109}
110
111package_python-romanisim-doc() {
112 pkgdesc="Documentation for Python Romanisim"
113 arch=('any')
114 cd ${srcdir}/${_pyname}-${pkgver}/docs/_build
115
116 install -D -m644 ../../LICENSE -t "${pkgdir}/usr/share/licenses/${pkgname}"
117 install -d -m755 "${pkgdir}/usr/share/doc/${pkgbase}"
118 cp -a html "${pkgdir}/usr/share/doc/${pkgbase}"
119}
120

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion