wxparaver

LOW

maintainer gamezelda 3 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The source is downloaded from a project-owned domain (bsc.es) used by the Barcelona Supercomputing Center for official releases; despite the non-standard host triggering a static rule, this is a legitimate build of the project's own source code, not an unverifiable or third-party executable.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is downloaded from a project-owned domain (bsc.es) used by the Barcelona Supercomputing Center for official releases; despite the non-standard host triggering a static rule, this is a legitimate build of the project's own source code, not an unverifiable or third-party executable.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:10 source=("https://ftp.tools.bsc.es/$pkgname/$pkgname-${pkgver%.*}-src.tar.bz2"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Joan Bruguera Micó <joanbrugueram@gmail.com>
    
      2pkgname='wxparaver'
    
      3pkgdesc='Expressive powerful and flexible trace visualizer for post-mortem trace analysis (from BSC).'
    
      4pkgver='4.12.0.20241204'
    
      5pkgrel='5'
    
      6arch=('x86_64')
    
      7url='https://www.bsc.es/discover-bsc/organisation/scientific-structure/performance-tools'
    
      8license=('LGPL-2.1-or-later')
    
      9depends=(wxwidgets-gtk3 boost libxml2 zlib)
    
      10source=("https://ftp.tools.bsc.es/$pkgname/$pkgname-${pkgver%.*}-src.tar.bz2"
    
      11        "wxparaver-tutorialsdownload-Fix-Boost-ASIO-1.87.0-removals.patch"
    
      12        "wxParaver.desktop")
    
      13sha512sums=(9d44e08cb0372d1bda5d859c8cdc3aa17e4ea211694969b520c85b79fb70cc9584a9f408403ca3f3153404cf66c3484c6891fa16d09fde3d297366b11fd684c1
    
      14            942fd0f3df5fb8fed60b5a56e29b3b5b3c8e84d1c81de254824224aa584fbd367371556c9b38ae7f6db97f1025919ba2ff8c6bf121d31e68e429693e431c4806
    
      15            50dd3ff677895b9aad9b17a67c6791f96acc2b9c5bf65b3991a1b92cb17c6567735a740188aaedcf211ca9bfbfb7ef758109d57296315afdd35707b49955cb3c)
    
      16
    
      17prepare() {
    
      18	cd "$srcdir/$pkgname-${pkgver%.*}"
    
      19
    
      20	# WORKAROUND: By default, it seems that the wxParaver depends on an existing -kernel/-api installation
    
      21	#             We want to use the ones we just built, so replace the references to point to them instead
    
      22	cd src/wxparaver
    
      23	sed -i \
    
      24	    -e 's|-lparaver-api -lparaver-kernel|-L../../paraver-kernel/src/.libs -L../../paraver-kernel/api/.libs -lparaver-api -lparaver-kernel|g' \
    
      25	    -e '$awxparaver_bin_CXXFLAGS = @CXXFLAGS@ -I../../paraver-kernel -I../../paraver-kernel/api' \
    
      26	    src/Makefile.am
    
      27	# shellcheck disable=SC2016
    
      28	sed -i 's| -L$PARAVER_LIBDIR||g' configure.ac
    
      29
    
      30	patch -Np1 -i "$srcdir/wxparaver-tutorialsdownload-Fix-Boost-ASIO-1.87.0-removals.patch"
    
      31
    
      32	autoreconf -i -f
    
      33}
    
      34
    
      35build() {
    
      36	cd "$srcdir/$pkgname-${pkgver%.*}"
    
      37
    
      38	# Arch's wx-config is named differently for GTK2/GTK3
    
      39	./configure \
    
      40		--prefix=/usr \
    
      41		--with-wx-config=/bin/wx-config
    
      42
    
      43	make
    
      44}
    
      45
    
      46package() {
    
      47	cd "$srcdir/$pkgname-${pkgver%.*}"
    
      48
    
      49	make DESTDIR="$pkgdir/" install
    
      50
    
      51	# Create a shortcut to execute the application easily from the user's desktop environment
    
      52	mkdir -p "$pkgdir/usr/share/applications"
    
      53	install -o root -g root -m 644 "$srcdir/wxParaver.desktop" "$pkgdir/usr/share/applications/wxParaver.desktop"
    
      54}
    
      55

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 00:29:17	Low	2