sdds

maintainer orphaned · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads source files from the official Argonne National Laboratory host, which is the legitimate project maintainer; despite the static analyzer flagging non-standard hosts, these are official project URLs, and the build process compiles source code normally without executing untrusted binaries or exfiltrating data.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads source files from the official Argonne National Laboratory host, which is the legitimate project maintainer; despite the static analyzer flagging non-standard hosts, these are official project URLs, and the build process compiles source code normally without executing untrusted binaries or exfiltrating data.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:13 "http://www.aps.anl.gov/Accelerator_Systems_Division/Accelerator_Operations_Physics/downloads/SDDS.${pkgver}.tar.gz"

PKGBUILD

1 offending line(s) highlighted

      1# $Id$
    
      2# Maintainer: Grey Christoforo <first name at last name dot net>
    
      3
    
      4pkgname=sdds
    
      5pkgver=3.5
    
      6pkgrel=1
    
      7pkgdesc="Toolkit for the Self Describing Data Set file format developed at Argonne Nat'l lab"
    
      8arch=("any")
    
      9makedepends=('perl')
    
      10url="http://www.aps.anl.gov/Accelerator_Systems_Division/Accelerator_Operations_Physics/manuals/SDDStoolkit/SDDStoolkit.html"
    
      11license=('custom')
    
      12source=(
    
      13        "http://www.aps.anl.gov/Accelerator_Systems_Division/Accelerator_Operations_Physics/downloads/SDDS.${pkgver}.tar.gz"
    
      14        "http://www.aps.anl.gov/Accelerator_Systems_Division/Accelerator_Operations_Physics/downloads/epics.base.configure.tar.gz"
    
      15        "http://www.aps.anl.gov/Accelerator_Systems_Division/Accelerator_Operations_Physics/downloads/defns.rpn"
    
      16	"http://www.aps.anl.gov/Accelerator_Systems_Division/Accelerator_Operations_Physics/downloads/epics.extensions.configure.tar.gz"
    
      17	)
    
      18md5sums=('735b4e9adb18c3277b757c46563de5b4'
    
      19         '4db0cac7a918424b2fc2a588c95a29d9'
    
      20         '7b5e17cdbcdeff1e3381fd1618f0a40d'
    
      21         '0c2b5e593aecc70edb6c86bca57452c6')
    
      22
    
      23prepare() {
    
      24  sed -i 's,\$,#\$,g' "${srcdir}/epics/base/configure/os/CONFIG_SITE.linux-x86_64.UnixCommon"
    
      25  #sed -i "s,#INSTALL_LOCATION=<fullpathname>,INSTALL_LOCATION=${pkgdir},g" "${srcdir}/epics/extensions/configure/CONFIG_SITE"
    
      26  #sed -i 's,SHARED_LIBRARIES = NO,SHARED_LIBRARIES = YES,g' "${srcdir}/epics/extensions/configure/CONFIG_SITE"
    
      27  #sed -i 's,SHARED_LIBRARIES=NO,SHARED_LIBRARIES=YES,g' "${srcdir}/epics/extensions/configure/CONFIG"
    
      28  
    
      29  # fixes for python
    
      30  sed -i 's,PYTHON_PREFIX = \$(shell python -c "import sys; print sys.prefix"),PYTHON_PREFIX = \$(shell python2 -c "import sys; print sys.prefix"),g' "${srcdir}/epics/extensions/src/SDDS/python/Makefile"
    
      31  sed -i 's,PYTHON_EXEC_PREFIX = \$(shell python -c "import sys; print sys.exec_prefix"),PYTHON_EXEC_PREFIX = \$(shell python2 -c "import sys; print sys.exec_prefix"),g' "${srcdir}/epics/extensions/src/SDDS/python/Makefile"
    
      32  sed -i 's,PYTHON_VERSION = \$(shell python -c "import sys; print sys.version\[:3\]"),PYTHON_VERSION = \$(shell python2 -c "import sys; print sys.version\[:3\]"),g' "${srcdir}/epics/extensions/src/SDDS/python/Makefile"
    
      33
    
      34
    
      35
    
      36  cd "${srcdir}/epics/base"
    
      37  make clean
    
      38
    
      39  cd "${srcdir}/epics/extensions/configure"
    
      40  make clean
    
      41}
    
      42
    
      43build() {
    
      44  cd "${srcdir}/epics/base"
    
      45  export RPN_DEFNS="${srcdir}/defns.rpn"
    
      46  export HOST_ARCH=linux-x86_64
    
      47  export EPICS_HOST_ARCH=linux-x86_64
    
      48  make
    
      49
    
      50  cd "${srcdir}/epics/extensions/configure"
    
      51  make
    
      52
    
      53  cd "${srcdir}/epics/extensions/src/SDDS"
    
      54  make
    
      55
    
      56  cd "${srcdir}/epics/extensions/src/SDDS/python"
    
      57  make
    
      58}
    
      59
    
      60package() {
    
      61  mkdir -p "${pkgdir}/opt"
    
      62  cp -a "${srcdir}/epics/extensions" "${pkgdir}/opt/sdds"
    
      63  cd "${pkgdir}/opt/sdds"
    
      64  rm -rf CVS configure config 
    
      65}
    
      66

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2