scribus-svn

LOW

maintainer migrev 51 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The source is a Subversion checkout from the official project's own domain (scribus.net), which is normal for -svn packages; building from upstream's VCS is standard practice and not inherently dangerous despite the non-whitelisted host.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a Subversion checkout from the official project's own domain (scribus.net), which is normal for -svn packages; building from upstream's VCS is standard practice and not inherently dangerous despite the non-whitelisted host.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:57 source=('scribus::svn://scribus.net/trunk')

PKGBUILD

1 offending line(s) highlighted

      1# Contributor: Simo Huhtiranta <simo_huhtirantaATpp_inet_fi>  
    
      2# Contributor: Tilmann Becker <tilmann.becker@web.de>
    
      3# Contributor: Stefan Husmann <stefan-husmann@t-online.de>
    
      4# Maintainer: Miguel Revilla Rodríguez <yo at miguelrevilla.com>
    
      5
    
      6pkgname=scribus-svn
    
      7pkgver=27785
    
      8pkgrel=1
    
      9pkgdesc="A desktop publishing program - Version from SVN"
    
      10arch=('x86_64')
    
      11license=('GPL-2.0-or-later' 'LGPL-2.1-or-later' 'BSD-3-Clause' 'MIT')
    
      12url="http://www.scribus.net"
    
      13depends=(
    
      14        boost-libs
    
      15        cairo
    
      16        fontconfig
    
      17        freetype2
    
      18        graphicsmagick
    
      19        harfbuzz-icu
    
      20        hicolor-icon-theme
    
      21        hunspell
    
      22        icu
    
      23        lcms2
    
      24        libcdr
    
      25        libcups
    
      26        libfreehand
    
      27        libjpeg-turbo
    
      28        libmspub
    
      29        libpagemaker
    
      30        libpng
    
      31        librevenge
    
      32        libtiff
    
      33        libvisio
    
      34        libqxp
    
      35        libxml2
    
      36        libzmf
    
      37        openscenegraph
    
      38        openssl
    
      39        podofo
    
      40        poppler
    
      41        python
    
      42        python-pillow
    
      43        qt6-5compat
    
      44        qt6-base
    
      45        qt6-declarative
    
      46        qt6-imageformats
    
      47        qt6-svg
    
      48        zlib
    
      49        qt-advanced-docking-system
    
      50)
    
      51makedepends=(cmake subversion boost qt6-tools)
    
      52optdepends=(
    
      53        'hyphen: for hyphenation support'
    
      54)
    
      55conflicts=('scribus')
    
      56provides=('scribus')
    
      57source=('scribus::svn://scribus.net/trunk')
    
      58sha256sums=('SKIP')
    
      59_svnmod='scribus'
    
      60
    
      61pkgver() {
    
      62  LANG=C
    
      63  cd ${_svnmod}
    
      64  local ver="$(svnversion)"
    
      65  printf "%s" "${ver//[[:alpha:]]}"
    
      66}
    
      67
    
      68prepare() {
    
      69	cd ${_svnmod}
    
      70	# makepkg may reuse the SVN working copy; discard changes from an older build.
    
      71	svn revert -qR .
    
      72	rm -rf Scribus/build
    
      73
    
      74	cd Scribus
    
      75	find scribus -type f \( -name "*.cpp" -o -name "*.h" \) -exec sed -i \
    
      76	's|#include "third_party/Qt-Advanced-Docking-System/src/|#include "|g' {} +
    
      77	sed -i '/#if(WANT_QTADS)/,/^#endif()/d' scribus/CMakeLists.txt
    
      78	sed -i '/#if(WANT_QTADS)/,/^#endif()/d' scribus/third_party/CMakeLists.txt
    
      79	sed -i '/add_subdirectory(plugins)/i\
    
      80find_package(qtadvanceddocking-qt6 REQUIRED)\
    
      81get_target_property(QTADS_INCLUDE_DIRS ads::qtadvanceddocking-qt6 INTERFACE_INCLUDE_DIRECTORIES)\
    
      82include_directories(${QTADS_INCLUDE_DIRS})' scribus/CMakeLists.txt
    
      83
    
      84	cat <<'EOF' >> scribus/CMakeLists.txt
    
      85
    
      86target_link_libraries(${EXE_NAME} PRIVATE ads::qtadvanceddocking-qt6)
    
      87EOF
    
      88}
    
      89
    
      90build() {
    
      91        cd ${_svnmod}/Scribus
    
      92        cmake . -B build \
    
      93                -DCMAKE_INSTALL_PREFIX=/usr \
    
      94                -DCMAKE_BUILD_TYPE=Release \
    
      95                -DWANT_DISTROBUILD=ON \
    
      96                -DWANT_CPP20=ON \
    
      97                -DWANT_GRAPHICSMAGICK=ON \
    
      98		-DWANT_PCH=ON \
    
      99		-DWANT_CCACHE=ON \
    
      100		-DWITH_PODOFO=ON \
    
      101		-Dqtadvanceddocking-qt6_DIR=/usr/lib/cmake/qtadvanceddocking-qt6
    
      102        cmake --build build
    
      103}
    
      104
    
      105package() {
    
      106        cd ${_svnmod}/Scribus
    
      107        DESTDIR="${pkgdir}" cmake --install build
    
      108        install -Dm644 COPYING "${pkgdir}/usr/share/licenses/${pkgname}/COPYING"
    
      109        install -Dm644 scribus.desktop "${pkgdir}/usr/share/applications/scribus.desktop"
    
      110        install -d "${pkgdir}/usr/share/pixmaps"
    
      111        ln -s /usr/share/scribus/icons/1_7_0/scribus-icon.svg "${pkgdir}/usr/share/pixmaps/scribus.svg"
    
      112        rm -rf "${pkgdir}/usr/share/scribus/dicts/hyph"
    
      113        ln -sf /usr/share/hyphen "${pkgdir}/usr/share/scribus/dicts/hyph"
    
      114}
    
      115

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 00:29:17	Low	2