yoda

MEDIUM
maintainer fsiegert 4 votes scanned 2026-09-15 13:19:52.153816
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:11 source=(https://cedar-tools.web.cern.ch/downloads/YODA-$pkgver.tar.gz)

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Frank Siegert <frank.siegert@googlemail.com>
2pkgname=yoda
3pkgver=2.1.4
4pkgrel=1
5pkgdesc="A particle physics package for data analysis (specifically histogramming) classes."
6arch=('x86_64' 'i686')
7url="http://yoda.hepforge.org"
8license=('GPL3')
9depends=('python')
10makedepends=('cython')
11source=(https://cedar-tools.web.cern.ch/downloads/YODA-$pkgver.tar.gz)
12md5sums=('86aac94d350b8a11dbaff40afc40e41d')
13
14package() {
15 cd "$srcdir/YODA-$pkgver"
16
17 ./configure --prefix=/usr --sysconfdir=/etc
18 make DESTDIR="$pkgdir/" install
19}
20

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-09-15 13:19
@@ -1,6 +1,6 @@
# Maintainer: Frank Siegert <frank.siegert@googlemail.com>
pkgname=yoda
-pkgver=2.1.3
+pkgver=2.1.4
pkgrel=1
pkgdesc="A particle physics package for data analysis (specifically histogramming) classes."
arch=('x86_64' 'i686')
@@ -8,8 +8,8 @@
license=('GPL3')
depends=('python')
makedepends=('cython')
-source=(https://yoda.hepforge.org/downloads?f=YODA-$pkgver.tar.gz)
-md5sums=('0ca731f9fbadd7f81b9ce035b4251659')
+source=(https://cedar-tools.web.cern.ch/downloads/YODA-$pkgver.tar.gz)
+md5sums=('86aac94d350b8a11dbaff40afc40e41d')
package() {
cd "$srcdir/YODA-$pkgver"

Scan history

Scanned at (UTC)SeverityRules
2026-09-15 13:19:52 Medium 1
2026-06-19 19:07:35 Clean 2
2026-06-18 18:55:24 Clean 2
2026-06-18 16:11:54 Medium 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion