sdds

LOW

maintainer orphaned 0 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The package downloads source files from the official Argonne National Laboratory host, which is the legitimate project maintainer; despite the static analyzer flagging non-standard hosts, these are official project URLs, and the build process compiles source code normally without executing untrusted binaries or exfiltrating data.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads source files from the official Argonne National Laboratory host, which is the legitimate project maintainer; despite the static analyzer flagging non-standard hosts, these are official project URLs, and the build process compiles source code normally without executing untrusted binaries or exfiltrating data.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:13 "http://www.aps.anl.gov/Accelerator_Systems_Division/Accelerator_Operations_Physics/downloads/SDDS.${pkgver}.tar.gz"

PKGBUILD

1 offending line(s) highlighted

      1# $Id$
    
      2# Maintainer: Grey Christoforo <first name at last name dot net>
    
      3
    
      4pkgname=sdds
    
      5pkgver=3.5
    
      6pkgrel=1
    
      7pkgdesc="Toolkit for the Self Describing Data Set file format developed at Argonne Nat'l lab"
    
      8arch=("any")
    
      9makedepends=('perl')
    
      10url="http://www.aps.anl.gov/Accelerator_Systems_Division/Accelerator_Operations_Physics/manuals/SDDStoolkit/SDDStoolkit.html"
    
      11license=('custom')
    
      12source=(
    
      13        "http://www.aps.anl.gov/Accelerator_Systems_Division/Accelerator_Operations_Physics/downloads/SDDS.${pkgver}.tar.gz"
    
      14        "http://www.aps.anl.gov/Accelerator_Systems_Division/Accelerator_Operations_Physics/downloads/epics.base.configure.tar.gz"
    
      15        "http://www.aps.anl.gov/Accelerator_Systems_Division/Accelerator_Operations_Physics/downloads/defns.rpn"
    
      16	"http://www.aps.anl.gov/Accelerator_Systems_Division/Accelerator_Operations_Physics/downloads/epics.extensions.configure.tar.gz"
    
      17	)
    
      18md5sums=('735b4e9adb18c3277b757c46563de5b4'
    
      19         '4db0cac7a918424b2fc2a588c95a29d9'
    
      20         '7b5e17cdbcdeff1e3381fd1618f0a40d'
    
      21         '0c2b5e593aecc70edb6c86bca57452c6')
    
      22
    
      23prepare() {
    
      24  sed -i 's,\$,#\$,g' "${srcdir}/epics/base/configure/os/CONFIG_SITE.linux-x86_64.UnixCommon"
    
      25  #sed -i "s,#INSTALL_LOCATION=<fullpathname>,INSTALL_LOCATION=${pkgdir},g" "${srcdir}/epics/extensions/configure/CONFIG_SITE"
    
      26  #sed -i 's,SHARED_LIBRARIES = NO,SHARED_LIBRARIES = YES,g' "${srcdir}/epics/extensions/configure/CONFIG_SITE"
    
      27  #sed -i 's,SHARED_LIBRARIES=NO,SHARED_LIBRARIES=YES,g' "${srcdir}/epics/extensions/configure/CONFIG"
    
      28  
    
      29  # fixes for python
    
      30  sed -i 's,PYTHON_PREFIX = \$(shell python -c "import sys; print sys.prefix"),PYTHON_PREFIX = \$(shell python2 -c "import sys; print sys.prefix"),g' "${srcdir}/epics/extensions/src/SDDS/python/Makefile"
    
      31  sed -i 's,PYTHON_EXEC_PREFIX = \$(shell python -c "import sys; print sys.exec_prefix"),PYTHON_EXEC_PREFIX = \$(shell python2 -c "import sys; print sys.exec_prefix"),g' "${srcdir}/epics/extensions/src/SDDS/python/Makefile"
    
      32  sed -i 's,PYTHON_VERSION = \$(shell python -c "import sys; print sys.version\[:3\]"),PYTHON_VERSION = \$(shell python2 -c "import sys; print sys.version\[:3\]"),g' "${srcdir}/epics/extensions/src/SDDS/python/Makefile"
    
      33
    
      34
    
      35
    
      36  cd "${srcdir}/epics/base"
    
      37  make clean
    
      38
    
      39  cd "${srcdir}/epics/extensions/configure"
    
      40  make clean
    
      41}
    
      42
    
      43build() {
    
      44  cd "${srcdir}/epics/base"
    
      45  export RPN_DEFNS="${srcdir}/defns.rpn"
    
      46  export HOST_ARCH=linux-x86_64
    
      47  export EPICS_HOST_ARCH=linux-x86_64
    
      48  make
    
      49
    
      50  cd "${srcdir}/epics/extensions/configure"
    
      51  make
    
      52
    
      53  cd "${srcdir}/epics/extensions/src/SDDS"
    
      54  make
    
      55
    
      56  cd "${srcdir}/epics/extensions/src/SDDS/python"
    
      57  make
    
      58}
    
      59
    
      60package() {
    
      61  mkdir -p "${pkgdir}/opt"
    
      62  cp -a "${srcdir}/epics/extensions" "${pkgdir}/opt/sdds"
    
      63  cd "${pkgdir}/opt/sdds"
    
      64  rm -rf CVS configure config 
    
      65}
    
      66

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 00:29:17	Low	2