yacas

maintainer chelqo · 16 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads the project's source code from GitHub and documentation from readthedocs.org; both are standard, plausible project-hosting platforms. The source tarball is from the official project repository, and the EPUB manual is non-executable documentation, so the non-whitelisted host for the EPUB does not pose a significant security risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 90%): The package downloads the project's source code from GitHub and documentation from readthedocs.org; both are standard, plausible project-hosting platforms. The source tarball is from the official project repository, and the EPUB manual is non-executable documentation, so the non-whitelisted host for the EPUB does not pose a significant security risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:31 "https://buildmedia.readthedocs.org/media/epub/yacas/v${_docver}/yacas.epub"

PKGBUILD

1 offending line(s) highlighted

      1# Contributor: Kaiting Chen <kaitocracy@gmail.com>
    
      2# Contributor: Stefan Husmann <stefan.husmann@t-systems.com>
    
      3# Contributor: Stéphane Gaudreault <Stephane.Gaudreault@gmail.com>
    
      4# Maintainer : Marcos Heredia <chelqo@gmail.com>
    
      5
    
      6pkgname=yacas
    
      7pkgver=1.9.1
    
      8_docver=1.8.0
    
      9pkgrel=1
    
      10pkgdesc='Yet another computer algebra system'
    
      11url='http://www.yacas.org/'
    
      12screenshot='https://dl.dropbox.com/s/dy9evnpl13kdo21/yacas-console.png'
    
      13license=('GPL2')
    
      14groups=("mathematics")
    
      15arch=('i686' 'x86_64')
    
      16#--------------------------------------------------------------
    
      17_build_gui="ON"
    
      18if [ ${_build_gui} == "OFF" ]; then
    
      19depends=('glibc' 'gcc-libs')
    
      20makedepends=('gcc' 'cmake' 'perl')
    
      21else
    
      22depends=('dav1d' 'dbus' 'libbluray' 'libva' 'libvorbis' 'libxcursor' 'nspr' 'qt5-webengine' 'x264' 'x265' 'xvidcore' 'zstd')
    
      23makedepends=('gcc' 'cmake' 'perl' 'python-sphinx' 'python-sphinxcontrib-bibtex' 'python-sphinx_rtd_theme' 'npm' 'qt5-svg')
    
      24fi
    
      25#--------------------------------------------------------------
    
      26optdepends=('gnuplot' 'lynx' 'texmacs' 'fbreader: Reading EPUB manual')
    
      27conflicts=('yagy')
    
      28install=${pkgname}.install
    
      29noextract=('yacas.epub')
    
      30source=("${pkgname}-${pkgver}.tar.gz::https://github.com/grzegorzmazur/yacas/archive/v${pkgver}.tar.gz"
    
      31        "https://buildmedia.readthedocs.org/media/epub/yacas/v${_docver}/yacas.epub"
    
      32        "yacas.desktop"
    
      33        "yacas-docs.desktop"
    
      34        )
    
      35md5sums=('f908d52c6095d45bd69bc3e517dbee08'  # yacas source
    
      36         'becd320686b3b9aa2e6c39477f37ff06'  # Epub manual
    
      37         'eb776002fabe21623716ed2642f6d365'  # yacas.desktop
    
      38         '04d2a47c02fba5d88f337a404e02929c'  # yacas-docs.desktop
    
      39         )
    
      40
    
      41build() {
    
      42  cd ${srcdir}/${pkgname}-${pkgver}
    
      43  [ -d build ] && rm -rf build
    
      44  mkdir build
    
      45  cd build
    
      46  msg "### cmake" ; cmake .. \
    
      47    -DCMAKE_INSTALL_PREFIX=/usr \
    
      48    -DENABLE_CYACAS_CONSOLE=ON \
    
      49    -DENABLE_CYACAS_GUI=${_build_gui} \
    
      50    -DENABLE_CYACAS_UNIT_TESTS=OFF \
    
      51    -DENABLE_CYACAS_BENCHMARKS=OFF \
    
      52    -DENABLE_JYACAS=OFF \
    
      53    -DENABLE_DOCS=ON \
    
      54    -DENABLE_CYACAS_KERNEL=OFF \
    
      55    -DCMAKE_BUILD_TYPE=Release
    
      56  msg "### make"  ; make
    
      57}
    
      58
    
      59package() {
    
      60  cd ${srcdir}/${pkgname}-${pkgver}/build
    
      61  msg "### instalation " ; make DESTDIR=$pkgdir install
    
      62  cd ..
    
      63  _appdir=${pkgdir}/usr/share/applications
    
      64  _pngdir=${pkgdir}/usr/share/pixmaps
    
      65  _docdir=${pkgdir}/usr/share/doc/${pkgname}
    
      66  _licdir=${pkgdir}/usr/share/licenses/${pkgname}
    
      67  install -dm755 ${_appdir} ${_pngdir} ${_docdir} ${_licdir}
    
      68  install -Dpm644 ${srcdir}/yacas.desktop ${_appdir}/
    
      69  install -Dpm644 ${srcdir}/yacas-docs.desktop ${_appdir}/
    
      70  [ ${_build_gui} == "OFF" ] && install -Dpm644 ${srcdir}/${pkgname}-${pkgver}/cyacas/yacas-gui/resources/pixmaps/yacas-gui.png ${_pngdir}
    
      71  install -Dpm644 AUTHORS CODE_OF_CONDUCT.md ChangeLog README.rst TODO ${_docdir}/
    
      72  install -Dpm644 ${srcdir}/yacas.epub ${pkgdir}/usr/share/yacas/
    
      73  install -Dpm644 COPYING ${_licdir}/
    
      74  (cd ${_docdir} ; ln -s ../../yacas/yacas.epub .)
    
      75}
    
      76

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2