xsane-gimp
LOW
maintainer tonitch
40 votes
base
xsane
scanned 2026-09-17 00:27:14.276658
Why flagged
The source is a tarball from a Debian archive, which is a standard and trustworthy source for packaging; the package builds from official project source code with additional patches, posing no execution of untrusted remote code or supply-chain risks.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from a Debian archive, which is a standard and trustworthy source for packaging; the package builds from official project source code with additional patches, posing no execution of untrusted remote code or supply-chain risks.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:15
"http://http.debian.net/debian/pool/main/x/$pkgname/${pkgname}_$pkgver.orig.tar.gz"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Peter Theobald <dev@petertheobald.de>
2
# Co-maintainer: Kristopher James Kent <kris@kjkent.dev>
3
# Contributor: Tobias Powalowski <tpowa@archlinux.org>
4
# Contributor: Sarah Hay <sarahhay@mb.sympatico.ca>
5
6
pkgbase='xsane'
7
pkgname=('xsane' 'xsane-gimp')
8
pkgver='0.999'
9
pkgrel='9'
10
arch=('x86_64')
11
url='https://gitlab.com/sane-project/frontend/xsane'
12
license=('GPL2')
13
makedepends=('gtk2' 'lcms2' 'sane' 'zlib' 'libjpeg-turbo' 'gimp')
14
source=(
15
"http://http.debian.net/debian/pool/main/x/$pkgname/${pkgname}_$pkgver.orig.tar.gz"
16
'xsane-0.995-xdg-open.patch'
17
'0165-xsane-0.999-lcms2.patch'
18
'0001-lcms2_configure.patch'
19
'xsane-preview-selection.patch'
20
'configure-add-stdlib-to-conftest.patch'
21
'fix-func_arg_mismatch.patch'
22
)
23
sha512sums=(
24
'73ec961fce1a86b5d6f5bac0995d222785eb4b077dc8e72492b092d2bf4500455426e80e4d27233721cd38ec84f77fb9f92190a6afe45bdaf7ffd1ee50b431ed'
25
'ed1c1b0fab10b456f7dc6befd6f91eb8d3e1bae0f1be3abf71d334d4a2ae8f8335ba37fdd73f336f7c5f45916df917dc77fd792e6b849a87bde95babc698bf39'
26
'557913adab90b2ba051a2988bdbfc600ca6a33f099810f5f867c8d8b2c5a45b0468dd8a1a1593ff33d149b4a5917b24d716b54ae2605b3a2e19053e02e5b64c6'
27
'a8b5e0466c1306b8df68d814a3f02bc74e4d470aa42b9e0eebad41d2e274ff74328a837dd9a0b5ca59e4df63ecbb53b268f6d4948a690d9346c5399bb5b3d1e4'
28
'001b021ddf0f92e2bbab0211cfe92c54b785e94e7c92102caedd8d4ce34c833847157174a4d800d8859ba8d05300db74b8af352e5347d2883e17bca57454e96d'
29
'04ea857a34a9400bc7c030563a942309d106893c6314dd099bf053227672fca9879314015be912538a7f89a414d3f0a24e7f45bfc51a0b621ed27dcc1c91a4e8'
30
'ebf917385e180434167b45db0f31f967158548dd60624b1412f1ec40e4895284aa420e76c96c82f5cf9d198b306a06b27e65b548d117032521e5dd2c09df8b38'
31
)
32
33
prepare() {
34
cd "$srcdir/$pkgname-$pkgver"
35
# Fix: use "xdg-open" instead of "netscape" to launch help browser - taken from Fedora
36
patch -Np1 -i "$srcdir/xsane-0.995-xdg-open.patch"
37
sed -i -e 's:png_ptr->jmpbuf:png_jmpbuf(png_ptr):' src/xsane-save.c
38
patch -Np1 -i "$srcdir/0165-xsane-0.999-lcms2.patch"
39
patch -Np1 -i "$srcdir/0001-lcms2_configure.patch"
40
patch -p1 -i "$srcdir/xsane-preview-selection.patch" # Fix selection preview
41
patch -p1 -i "$srcdir/configure-add-stdlib-to-conftest.patch" # Fix failing build of conftest by adding stdlib.h to test program
42
patch -p1 -i "$srcdir/fix-func_arg_mismatch.patch" # Fixes build failure, patch provided by AUR user jprjr
43
}
44
45
build() {
46
cd "$srcdir/$pkgbase-$pkgver"
47
48
./configure \
49
--prefix=/usr \
50
--mandir=/usr/share/man \
51
--enable-gimp
52
make
53
mv src/xsane src/xsane-gimp
54
55
# Build again with GIMP disabled
56
make clean
57
./configure \
58
--prefix=/usr \
59
--sbindir=/usr/bin \
60
--mandir=/usr/share/man \
61
--disable-gimp
62
make
63
}
64
65
package_xsane() {
66
pkgdesc='A GTK-based X11 frontend for SANE and plugin for GIMP.'
67
install="$pkgname.install"
68
depends=('gtk2' 'lcms2' 'sane' 'zlib' 'libjpeg-turbo')
69
optdepends=('xsane-gimp: for GIMP plugin support')
70
cd "$srcdir/$pkgbase-$pkgver"
71
make DESTDIR="$pkgdir" install
72
}
73
74
package_xsane-gimp() {
75
pkgdesc='XSane GIMP plugin.'
76
depends=('xsane' 'gimp')
77
cd "$srcdir/$pkgbase-$pkgver"
78
install -D -m755 src/xsane-gimp "$pkgdir/usr/bin/xsane-gimp"
79
80
# For making GIMP plugin available
81
mkdir -p "$pkgdir/usr/lib/gimp/2.0/plug-ins"
82
ln -sf /usr/bin/xsane-gimp "$pkgdir/usr/lib/gimp/2.0/plug-ins/xsane"
83
84
## TODO: Is the below still relevant? How come it's commented? If not useful, let's remove?
85
# http://cvs.fedoraproject.org/viewvc/rpms/xsane/devel/xsane.spec?revision=1.80&view=markup
86
# when makepkg will allow splitted pkg install file support we might change add a xsane-gimp.install file with the commands that are used by fedora,
87
# gentoo has something similar
88
#%post gimp
89
#107 if [ -x "%{_sbindir}/gimp-plugin-mgr" ]; then
90
#108 %{_sbindir}/gimp-plugin-mgr --install xsane
91
#109 fi
92
#110
93
#111 %preun gimp
94
#112 if [ $1 = 0 ]; then
95
#113 if [ -x "%{_sbindir}/gimp-plugin-mgr" ]; then
96
#114 %{_sbindir}/gimp-plugin-mgr --uninstall xsane
97
#115 fi
98
#116 fi
99
}
100
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |