stride

maintainer michael_wzq · 0 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package downloads source code and patches from non-whitelisted but project-related academic and Gentoo development hosts to build a scientific tool; all sources are verified via b2sums and the build process is transparent, posing no remote code execution or supply-chain risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads source code and patches from non-whitelisted but project-related academic and Gentoo development hosts to build a scientific tool; all sources are verified via b2sums and the build process is transparent, posing no remote code execution or supply-chain risk.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:24 'https://webclu.bio.wzw.tum.de/stride/stride.tar.gz'
  • PKGBUILD:25 'https://dev.gentoo.org/~pacho/stride/stride-20060723-update-r1.patch.xz'
  • PKGBUILD:26 'https://gitweb.gentoo.org/repo/gentoo.git/plain/sci-biology/stride/files/stride-20011129-fix-buildsystem.patch'

PKGBUILD

3 offending line(s) highlighted
1# Maintainer: Michael (https://aur.archlinux.org/account/michael_wzq)
2pkgname=stride
3pkgver=20060723
4pkgrel=1
5pkgdesc="Protein secondary structure assignment from atomic coordinates"
6arch=('x86_64')
7url='https://webclu.bio.wzw.tum.de/stride/'
8license=(LicenseRef-stride)
9makedepends=(
10 gcc
11 make
12)
13
14depends=(
15 glibc
16)
17
18b2sums=('0a6fbb7da0a18cc9fbc4beb3214488080e5f6b85b93f87a33f3d6c38385da12707ee0eb2a10a86c9f6dd3884bd043e3f7f36c6aac797da7dc4f351fab047a950'
19 '6f477787004fd962b2faf5f0dd1a497067608eb8fcc5d16e161d918ecff7a6b86184eeb5f97ece4465d7595dd64fd0958a6bcedb76f2b666bdc4d0947e51eda0'
20 'df077f9234808abe3a9346af6c4a8bde92812cc9f782ad37b75b060166b35686cbcdc2f4b12c26263127dbd3c488660bb2cf70bc553c267cb3e9f70eba68082d'
21 '22c33a3dbc2c0a85d3ae8aaf1072e47486f06074422fd60cf9357b513888a754e5b1937fb2c42f35bada0814d61f663a71407df0ccb10a2d973ee97fab3741e1')
22
23source=(
24 'https://webclu.bio.wzw.tum.de/stride/stride.tar.gz'
25 'https://dev.gentoo.org/~pacho/stride/stride-20060723-update-r1.patch.xz'
26 'https://gitweb.gentoo.org/repo/gentoo.git/plain/sci-biology/stride/files/stride-20011129-fix-buildsystem.patch'
27 'https://gitweb.gentoo.org/repo/gentoo.git/plain/sci-biology/stride/files/stride-20011129-clang16.patch'
28)
29
30prepare() {
31 patch -u -N -i stride-20060723-update-r1.patch
32 patch -u -N -i stride-20011129-fix-buildsystem.patch
33 patch -u -N -i stride-20011129-clang16.patch
34}
35
36build() {
37 make
38}
39
40package() {
41 install -Dm755 stride "${pkgdir}/usr/bin/stride"
42
43 install -Dm644 doc/stride.doc "${pkgdir}/usr/share/licenses/${pkgname}/stride.doc"
44
45 install -Dm644 HOW_TO_USER_STRIDE_FOR_CONTACT_ORDER_CALCULATIONS "${pkgdir}/usr/share/${pkgname}/HOW_TO_USER_STRIDE_FOR_CONTACT_ORDER_CALCULATIONS"
46
47 mkdir -p "${pkgdir}/usr/share/${pkgname}/doc"
48
49 install -Dm644 doc/notes.dos "${pkgdir}/usr/share/${pkgname}/doc/notes.dos"
50 install -Dm644 doc/notes.mac "${pkgdir}/usr/share/${pkgname}/doc/notes.mac"
51 install -Dm644 doc/relnotes.doc "${pkgdir}/usr/share/${pkgname}/doc/relnotes.doc"
52 install -Dm644 doc/stride.doc "${pkgdir}/usr/share/${pkgname}/doc/stride.doc"
53}
54

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion