scribus-svn

maintainer migrev · 51 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a Subversion checkout from the project's official domain (scribus.net), which is a normal and trusted method for development versions; building from VCS is standard practice in AUR and poses no inherent risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a Subversion checkout from the project's official domain (scribus.net), which is a normal and trusted method for development versions; building from VCS is standard practice in AUR and poses no inherent risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:57 source=('scribus::svn://scribus.net/trunk')

PKGBUILD

1 offending line(s) highlighted

      1# Contributor: Simo Huhtiranta <simo_huhtirantaATpp_inet_fi>  
    
      2# Contributor: Tilmann Becker <tilmann.becker@web.de>
    
      3# Contributor: Stefan Husmann <stefan-husmann@t-online.de>
    
      4# Maintainer: Miguel Revilla Rodríguez <yo at miguelrevilla.com>
    
      5
    
      6pkgname=scribus-svn
    
      7pkgver=27523
    
      8pkgrel=1
    
      9pkgdesc="A desktop publishing program - Version from SVN"
    
      10arch=('x86_64')
    
      11license=('GPL' 'LGPL')
    
      12url="http://www.scribus.net"
    
      13depends=(
    
      14	boost-libs
    
      15	cairo
    
      16	fontconfig
    
      17	freetype2
    
      18	graphicsmagick
    
      19	harfbuzz-icu
    
      20	hicolor-icon-theme
    
      21	hunspell
    
      22	icu
    
      23	lcms2
    
      24	libcdr
    
      25	libcups
    
      26	libfreehand
    
      27	libjpeg-turbo
    
      28	libmspub
    
      29	libpagemaker
    
      30	libpng
    
      31	librevenge
    
      32	libtiff
    
      33	libvisio
    
      34	libqxp
    
      35	libxml2
    
      36	libzmf
    
      37	openscenegraph
    
      38	openssl
    
      39	podofo
    
      40	poppler
    
      41	python
    
      42	python-pillow
    
      43	qt6-5compat
    
      44	qt6-base
    
      45	qt6-declarative
    
      46	qt6-imageformats
    
      47	qt6-svg
    
      48	qt6-tools
    
      49	zlib
    
      50)
    
      51makedepends=(cmake subversion boost)
    
      52optdepends=(
    
      53	'hyphen: for hyphenation support'
    
      54)
    
      55conflicts=('scribus')
    
      56provides=('scribus')
    
      57source=('scribus::svn://scribus.net/trunk')
    
      58sha256sums=('SKIP')
    
      59_svnmod='scribus'
    
      60
    
      61pkgver() {
    
      62  LANG=C
    
      63  cd ${_svnmod}
    
      64  local ver="$(svnversion)"
    
      65  printf "%s" "${ver//[[:alpha:]]}"
    
      66}
    
      67
    
      68build() {
    
      69	cd ${_svnmod}/Scribus
    
      70	cmake . -B build \
    
      71		-DCMAKE_INSTALL_PREFIX=/usr \
    
      72		-DCMAKE_BUILD_TYPE=Release \
    
      73		-DWANT_DISTROBUILD=ON \
    
      74		-DWANT_CPP20=ON \
    
      75		-DWANT_GRAPHICSMAGICK=ON \
    
      76		-DWANT_PCH=ON \
    
      77		-DWANT_CCACHE=ON \
    
      78		-DWITH_PODOFO=ON
    
      79	cmake --build build
    
      80}
    
      81
    
      82package() {
    
      83	cd ${_svnmod}/Scribus
    
      84	DESTDIR="${pkgdir}" cmake --install build
    
      85	install -Dm644 COPYING "${pkgdir}/usr/share/licenses/${pkgname}/COPYING"
    
      86	install -Dm644 scribus.desktop "${pkgdir}/usr/share/applications/scribus.desktop"
    
      87	install -d "${pkgdir}/usr/share/pixmaps"
    
      88	ln -s /usr/share/scribus/icons/1_7_0/scribus-icon.svg "${pkgdir}/usr/share/pixmaps/scribus.svg"
    
      89	rm -rf "${pkgdir}/usr/share/scribus/dicts/hyph"
    
      90	ln -sf /usr/share/hyphen "${pkgdir}/usr/share/scribus/dicts/hyph"
    
      91}
    
      92

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2