stride
The package downloads source code and patches from non-whitelisted but project-related academic and Gentoo development hosts to build a scientific tool; all sources are verified via b2sums and the build process is transparent, posing no remote code execution or supply-chain risk.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads source code and patches from non-whitelisted but project-related academic and Gentoo development hosts to build a scientific tool; all sources are verified via b2sums and the build process is transparent, posing no remote code execution or supply-chain risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:24
'https://webclu.bio.wzw.tum.de/stride/stride.tar.gz' -
PKGBUILD:25
'https://dev.gentoo.org/~pacho/stride/stride-20060723-update-r1.patch.xz' -
PKGBUILD:26
'https://gitweb.gentoo.org/repo/gentoo.git/plain/sci-biology/stride/files/stride-20011129-fix-buildsystem.patch'
PKGBUILD
3 offending line(s) highlighted# Maintainer: Michael (https://aur.archlinux.org/account/michael_wzq)
pkgname=stride
pkgver=20060723
pkgrel=1
pkgdesc="Protein secondary structure assignment from atomic coordinates"
arch=('x86_64')
url='https://webclu.bio.wzw.tum.de/stride/'
license=(LicenseRef-stride)
makedepends=(
gcc
make
)
depends=(
glibc
)
b2sums=('0a6fbb7da0a18cc9fbc4beb3214488080e5f6b85b93f87a33f3d6c38385da12707ee0eb2a10a86c9f6dd3884bd043e3f7f36c6aac797da7dc4f351fab047a950'
'6f477787004fd962b2faf5f0dd1a497067608eb8fcc5d16e161d918ecff7a6b86184eeb5f97ece4465d7595dd64fd0958a6bcedb76f2b666bdc4d0947e51eda0'
'df077f9234808abe3a9346af6c4a8bde92812cc9f782ad37b75b060166b35686cbcdc2f4b12c26263127dbd3c488660bb2cf70bc553c267cb3e9f70eba68082d'
'22c33a3dbc2c0a85d3ae8aaf1072e47486f06074422fd60cf9357b513888a754e5b1937fb2c42f35bada0814d61f663a71407df0ccb10a2d973ee97fab3741e1')
source=(
'https://webclu.bio.wzw.tum.de/stride/stride.tar.gz'
'https://dev.gentoo.org/~pacho/stride/stride-20060723-update-r1.patch.xz'
'https://gitweb.gentoo.org/repo/gentoo.git/plain/sci-biology/stride/files/stride-20011129-fix-buildsystem.patch'
'https://gitweb.gentoo.org/repo/gentoo.git/plain/sci-biology/stride/files/stride-20011129-clang16.patch'
)
prepare() {
patch -u -N -i stride-20060723-update-r1.patch
patch -u -N -i stride-20011129-fix-buildsystem.patch
patch -u -N -i stride-20011129-clang16.patch
}
build() {
make
}
package() {
install -Dm755 stride "${pkgdir}/usr/bin/stride"
install -Dm644 doc/stride.doc "${pkgdir}/usr/share/licenses/${pkgname}/stride.doc"
install -Dm644 HOW_TO_USER_STRIDE_FOR_CONTACT_ORDER_CALCULATIONS "${pkgdir}/usr/share/${pkgname}/HOW_TO_USER_STRIDE_FOR_CONTACT_ORDER_CALCULATIONS"
mkdir -p "${pkgdir}/usr/share/${pkgname}/doc"
install -Dm644 doc/notes.dos "${pkgdir}/usr/share/${pkgname}/doc/notes.dos"
install -Dm644 doc/notes.mac "${pkgdir}/usr/share/${pkgname}/doc/notes.mac"
install -Dm644 doc/relnotes.doc "${pkgdir}/usr/share/${pkgname}/doc/relnotes.doc"
install -Dm644 doc/stride.doc "${pkgdir}/usr/share/${pkgname}/doc/stride.doc"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |