yutovo

LOW
maintainer denprog 0 votes scanned 2026-09-17 00:27:14.276658
View on AUR
Why flagged

The package builds from multiple source repositories and archives, most of which are from official project hosts (GitHub, SourceForge, boost.org, etc.); skipped checksums reduce verifiability but all sources are used to compile dependencies locally, not execute prebuilt binaries, and the final install consists of self-built artifacts and static assets.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from multiple source repositories and archives, most of which are from official project hosts (GitHub, SourceForge, boost.org, etc.); skipped checksums reduce verifiability but all sources are used to compile dependencies locally, not execute prebuilt binaries, and the final install consists of self-built artifacts and static assets.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:17 "boost_1_83_0::https://archives.boost.io/release/1.83.0/source/boost_1_83_0.zip"
  • PKGBUILD:18 "giac_stable.tgz::https://www-fourier.univ-grenoble-alpes.fr/~parisse/giac/giac_stable.tgz"

PKGBUILD

2 offending line(s) highlighted
1# Maintainer: Denis Gordenin <support@yutovo.ru>
2pkgname=yutovo
3pkgver=1.7.1
4pkgrel=3
5pkgdesc="Arbitrary precision graphical WYSIWYG calculator inside a text editor"
6arch=(x86_64)
7url="https://yutovo.com"
8license=(GPL-3.0-only)
9
10depends=('hicolor-icon-theme' 'qt5-base' 'zlib' 'fontconfig' 'glibc' 'gcc-libs' 'libpng' 'gmp' 'mpfr' 'ttf-dejavu' 'gnu-free-fonts')
11
12makedepends=('git' 'cmake' 'base-devel' 'qt5-base' 'qt5-tools')
13
14source=(
15 "spdlog::git+https://github.com/gabime/spdlog.git#tag=v1.15.3"
16 "yutovo-logger::git+https://github.com/denprog/yutovo-logger.git#tag=v1.0.6"
17 "boost_1_83_0::https://archives.boost.io/release/1.83.0/source/boost_1_83_0.zip"
18 "giac_stable.tgz::https://www-fourier.univ-grenoble-alpes.fr/~parisse/giac/giac_stable.tgz"
19 "yutovo-calculator::git+https://github.com/denprog/yutovo-calculator.git#tag=v1.6.1"
20 "rapidjson::git+https://github.com/Tencent/rapidjson.git#tag=v1.1.0"
21 "yutovo-solver::git+https://github.com/denprog/yutovo-solver.git#tag=v1.3.1"
22 "mathgl-8.0.3.tar.gz::https://downloads.sourceforge.net/mathgl/mathgl-8.0.3.tar.gz"
23 "libharu::git+https://github.com/libharu/libharu.git#tag=v2.4.4"
24 "stb_image.h::https://raw.githubusercontent.com/nothings/stb/master/stb_image.h"
25 "stb_image_write.h::https://raw.githubusercontent.com/nothings/stb/master/stb_image_write.h"
26 "yutovo-editor::git+https://github.com/denprog/yutovo-editor.git#tag=v1.7.1"
27 "yutovo-library::git+https://github.com/denprog/yutovo-library.git#tag=v1.1.1"
28 "yutovo-desktop::git+https://github.com/denprog/yutovo-desktop.git#tag=v1.7.1"
29)
30
31sha256sums=(
32 'SKIP'
33 'SKIP'
34 'SKIP'
35 '3e7fa1c281a21ab74ed66ef247faffe5a105bc11be1f7715f31b4368ce8dcbc8'
36 'SKIP'
37 'SKIP'
38 'SKIP'
39 'SKIP'
40 'SKIP'
41 'SKIP'
42 'SKIP'
43 'SKIP'
44 'SKIP'
45 'SKIP'
46)
47
48prepare() {
49 mkdir -p deploy/lib
50 export YUTOVO_DEPLOY=$PWD/deploy
51}
52
53build() {
54 echo "Building spdlog"
55 cd spdlog
56 mkdir -p build && cd build
57 cmake -DCMAKE_BUILD_TYPE=Release -DSPDLOG_BUILD_TESTS=OFF -DCMAKE_INSTALL_PREFIX=$YUTOVO_DEPLOY ..
58 make -sj4 && make install
59 cd ../..
60
61 echo "Building yutovo-logger"
62 cd yutovo-logger
63 mkdir -p build && cd build
64 cmake -DCMAKE_BUILD_TYPE=Release -DCMAKE_INSTALL_PREFIX=$YUTOVO_DEPLOY ..
65 make -sj4 && make install
66 cd ../..
67
68 echo "Building boost"
69 cd boost_1_83_0
70 unset CFLAGS CXXFLAGS LDFLAGS
71 ./bootstrap.sh --prefix=$YUTOVO_DEPLOY
72 ./b2 headers
73 cp -r boost $YUTOVO_DEPLOY/include/
74 cd ..
75
76 echo "Building giac"
77 cd giac-2.0.0
78 patch -Np1 --forward -i "$srcdir/yutovo-desktop/setup/Snap/snap/giac_config_h.diff"
79 GIAC_BUILD_JOBS=4 bash "$srcdir/yutovo-desktop/setup/Snap/snap/build_giac.sh" "$srcdir/giac-2.0.0" "$YUTOVO_DEPLOY"
80 cd ..
81 export LIBRARY_PATH=$YUTOVO_DEPLOY/lib
82
83 echo "Building yutovo-calculator"
84 cd yutovo-calculator
85 mkdir -p build && cd build
86 cmake -DCMAKE_BUILD_TYPE=Release -DBUILD_TESTS=OFF -DCMAKE_INSTALL_PREFIX=$YUTOVO_DEPLOY ..
87 make -sj4 && make install
88 cd ../..
89
90 echo "Building rapidjson"
91 cd rapidjson
92 patch -Np1 -i "$srcdir/yutovo-desktop/setup/document.h.diff"
93 cp -r include/rapidjson "$YUTOVO_DEPLOY/include/"
94 cd ..
95
96 echo "Building yutovo-solver"
97 cd yutovo-solver
98 mkdir -p build && cd build
99 cmake -DCMAKE_BUILD_TYPE=Release -DBUILD_TESTS=OFF -DCMAKE_PREFIX_PATH=$YUTOVO_DEPLOY/lib/cmake -DCMAKE_INSTALL_PREFIX=$YUTOVO_DEPLOY ..
100 make -sj4 && make install
101 cd ../..
102
103 echo "Building mathgl"
104 cd mathgl-8.0.3
105 mkdir -p build && cd build
106 cmake -DCMAKE_BUILD_TYPE=Release -DCMAKE_INSTALL_LIBDIR=$YUTOVO_DEPLOY -Denable-openmp=False -Denable-png=False -Denable-opengl=False -DCMAKE_INSTALL_PREFIX=$YUTOVO_DEPLOY ..
107 make -sj4 && make install
108 cd ../..
109
110 echo "Building libharu"
111 cd libharu
112 mkdir -p build && cd build
113 cmake -DCMAKE_BUILD_TYPE=Release -DBUILD_SHARED_LIBS=OFF -DCMAKE_INSTALL_PREFIX=$YUTOVO_DEPLOY ..
114 make -sj4 && make install
115 cd ../..
116
117 mkdir -p $YUTOVO_DEPLOY/../third-party/stb_image
118 cp stb_image.h $YUTOVO_DEPLOY/../third-party/stb_image/
119 cp stb_image_write.h $YUTOVO_DEPLOY/../third-party/stb_image/
120
121 echo "Building yutovo-editor"
122 cd yutovo-editor
123 mkdir -p build && cd build
124 cmake -DCMAKE_BUILD_TYPE=Release -DBUILD_TESTS=OFF -DCMAKE_INSTALL_PREFIX=$YUTOVO_DEPLOY ..
125 make -sj4 && make install
126 cd ../..
127
128 echo "Building yutovo-library"
129 cd yutovo-library
130 mkdir -p $YUTOVO_DEPLOY/bin
131 ./make_library.sh $YUTOVO_DEPLOY/bin ZIP
132 cd ..
133
134 echo "Building yutovo-desktop"
135 cd yutovo-desktop
136 mkdir -p build && cd build
137 cmake -DCMAKE_BUILD_TYPE=Release -DBUILD_TESTS=OFF -DCMAKE_INSTALL_PREFIX=$YUTOVO_DEPLOY ..
138 make -sj4 && make install
139 cd ../..
140}
141
142package() {
143 echo "package"
144 mkdir -p $pkgdir/usr/bin
145 mkdir -p $pkgdir/usr/share/icons/hicolor/16x16/apps
146 mkdir -p $pkgdir/usr/share/icons/hicolor/32x32/apps
147 mkdir -p $pkgdir/usr/share/icons/hicolor/64x64/apps
148 mkdir -p $pkgdir/usr/share/icons/hicolor/256x256/apps
149 mkdir -p $pkgdir/usr/share/icons/hicolor/256x256/mimetypes
150 mkdir -p $pkgdir/usr/share/applications/
151 mkdir -p $pkgdir/usr/share/mime/packages/
152 mkdir -p $pkgdir/usr/share/metainfo/
153 mkdir -p $pkgdir/usr/share/yutovo/translations/
154
155 cp $YUTOVO_DEPLOY/bin/yutovo-desktop $pkgdir/usr/bin/
156 cp $YUTOVO_DEPLOY/bin/yutovo-solver-calculator-worker $pkgdir/usr/bin/
157 cp -r $srcdir/yutovo-desktop/build/src/*.qm $pkgdir/usr/share/yutovo/translations/
158 cp -r $YUTOVO_DEPLOY/bin/library $pkgdir/usr/share/yutovo/
159 cp $srcdir/yutovo-desktop/setup/Arch/run.sh $pkgdir/usr/bin/yutovo
160 cp $srcdir/yutovo-desktop/setup/yutovo-16.png $pkgdir/usr/share/icons/hicolor/16x16/apps/yutovo.png
161 cp $srcdir/yutovo-desktop/setup/yutovo-32.png $pkgdir/usr/share/icons/hicolor/32x32/apps/yutovo.png
162 cp $srcdir/yutovo-desktop/setup/yutovo-64.png $pkgdir/usr/share/icons/hicolor/64x64/apps/yutovo.png
163 cp $srcdir/yutovo-desktop/src/images/mainicon.png $pkgdir/usr/share/icons/hicolor/256x256/apps/yutovo.png
164 cp $srcdir/yutovo-desktop/src/images/mainicon.png $pkgdir/usr/share/icons/hicolor/256x256/mimetypes/application-x-yut.png
165
166 chmod g-w $pkgdir/usr/bin/yutovo-desktop
167 chmod o-w $pkgdir/usr/bin/yutovo-desktop
168 chmod g-w $pkgdir/usr/bin/yutovo-solver-calculator-worker
169 chmod o-w $pkgdir/usr/bin/yutovo-solver-calculator-worker
170 chmod +x $pkgdir/usr/bin/yutovo
171 chmod -R -w $pkgdir/usr/share/yutovo/library
172
173 cp $srcdir/yutovo-desktop/setup/Arch/yutovo.desktop $pkgdir/usr/share/applications/
174 cp $srcdir/yutovo-desktop/setup/yutovo.xml $pkgdir/usr/share/mime/packages/
175 cp $srcdir/yutovo-desktop/setup/com.yutovo.yutovo.metainfo.xml $pkgdir/usr/share/metainfo/
176}
177

Changes since previous scan

--- PKGBUILD @ 2026-08-31 00:19
+++ PKGBUILD @ 2026-09-17 00:27
@@ -1,13 +1,13 @@
# Maintainer: Denis Gordenin <support@yutovo.ru>
pkgname=yutovo
-pkgver=1.6.2
-pkgrel=1
+pkgver=1.7.1
+pkgrel=3
pkgdesc="Arbitrary precision graphical WYSIWYG calculator inside a text editor"
arch=(x86_64)
url="https://yutovo.com"
license=(GPL-3.0-only)
-depends=('hicolor-icon-theme' 'qt5-base' 'zlib' 'fontconfig' 'glibc' 'gcc-libs' 'libpng' 'gmp' 'mpfr')
+depends=('hicolor-icon-theme' 'qt5-base' 'zlib' 'fontconfig' 'glibc' 'gcc-libs' 'libpng' 'gmp' 'mpfr' 'ttf-dejavu' 'gnu-free-fonts')
makedepends=('git' 'cmake' 'base-devel' 'qt5-base' 'qt5-tools')
@@ -15,26 +15,24 @@
"spdlog::git+https://github.com/gabime/spdlog.git#tag=v1.15.3"
"yutovo-logger::git+https://github.com/denprog/yutovo-logger.git#tag=v1.0.6"
"boost_1_83_0::https://archives.boost.io/release/1.83.0/source/boost_1_83_0.zip"
- "mpc::https://ftp.gnu.org/gnu/mpc/mpc-1.3.1.tar.gz"
- "symengine::https://github.com/symengine/symengine/archive/refs/tags/v0.14.0.tar.gz"
- "yutovo-calculator::git+https://github.com/denprog/yutovo-calculator.git#tag=v1.5.1"
+ "giac_stable.tgz::https://www-fourier.univ-grenoble-alpes.fr/~parisse/giac/giac_stable.tgz"
+ "yutovo-calculator::git+https://github.com/denprog/yutovo-calculator.git#tag=v1.6.1"
"rapidjson::git+https://github.com/Tencent/rapidjson.git#tag=v1.1.0"
- "yutovo-solver::git+https://github.com/denprog/yutovo-solver.git#tag=v1.2.2"
+ "yutovo-solver::git+https://github.com/denprog/yutovo-solver.git#tag=v1.3.1"
"mathgl-8.0.3.tar.gz::https://downloads.sourceforge.net/mathgl/mathgl-8.0.3.tar.gz"
"libharu::git+https://github.com/libharu/libharu.git#tag=v2.4.4"
"stb_image.h::https://raw.githubusercontent.com/nothings/stb/master/stb_image.h"
"stb_image_write.h::https://raw.githubusercontent.com/nothings/stb/master/stb_image_write.h"
- "yutovo-editor::git+https://github.com/denprog/yutovo-editor.git#tag=v1.6.2"
- "yutovo-library::git+https://github.com/denprog/yutovo-library.git#branch=desktop"
- "yutovo-desktop::git+https://github.com/denprog/yutovo-desktop.git#tag=v1.6.2"
+ "yutovo-editor::git+https://github.com/denprog/yutovo-editor.git#tag=v1.7.1"
+ "yutovo-library::git+https://github.com/denprog/yutovo-library.git#tag=v1.1.1"
+ "yutovo-desktop::git+https://github.com/denprog/yutovo-desktop.git#tag=v1.7.1"
)
sha256sums=(
'SKIP'
'SKIP'
'SKIP'
- 'SKIP'
- 'SKIP'
+ '3e7fa1c281a21ab74ed66ef247faffe5a105bc11be1f7715f31b4368ce8dcbc8'
'SKIP'
'SKIP'
'SKIP'
@@ -57,14 +55,14 @@
cd spdlog
mkdir -p build && cd build
cmake -DCMAKE_BUILD_TYPE=Release -DSPDLOG_BUILD_TESTS=OFF -DCMAKE_INSTALL_PREFIX=$YUTOVO_DEPLOY ..
- make -sj && make install
+ make -sj4 && make install
cd ../..
echo "Building yutovo-logger"
cd yutovo-logger
mkdir -p build && cd build
cmake -DCMAKE_BUILD_TYPE=Release -DCMAKE_INSTALL_PREFIX=$YUTOVO_DEPLOY ..
- make -sj && make install
+ make -sj4 && make install
cd ../..
echo "Building boost"
@@ -75,24 +73,18 @@
cp -r boost $YUTOVO_DEPLOY/include/
cd ..
- echo "Building mpc"
- cd mpc-1.3.1
- ./configure --enable-static --disable-shared --prefix=$YUTOVO_DEPLOY --libdir=$YUTOVO_DEPLOY/lib
- make -sj && make install
+ echo "Building giac"
+ cd giac-2.0.0
+ patch -Np1 --forward -i "$srcdir/yutovo-desktop/setup/Snap/snap/giac_config_h.diff"
+ GIAC_BUILD_JOBS=4 bash "$srcdir/yutovo-desktop/setup/Snap/snap/build_giac.sh" "$srcdir/giac-2.0.0" "$YUTOVO_DEPLOY"
cd ..
-
- echo "Building symengine"
- cd symengine-0.14.0
- mkdir -p build && cd build
- cmake -DCMAKE_BUILD_TYPE=Release -DBUILD_TESTING=OFF -DBUILD_BENCHMARKS=OFF -DWITH_MPFR=True -DWITH_MPC=True -DBUILD_SHARED_LIBS=False -DCMAKE_INSTALL_PREFIX=$YUTOVO_DEPLOY ..
- make -sj && make install
- cd ../..
+ export LIBRARY_PATH=$YUTOVO_DEPLOY/lib
echo "Building yutovo-calculator"
cd yutovo-calculator
mkdir -p build && cd build
cmake -DCMAKE_BUILD_TYPE=Release -DBUILD_TESTS=OFF -DCMAKE_INSTALL_PREFIX=$YUTOVO_DEPLOY ..
- make -sj && make install
+ make -sj4 && make install
cd ../..
echo "Building rapidjson"
@@ -104,22 +96,22 @@
echo "Building yutovo-solver"
cd yutovo-solver
mkdir -p build && cd build
- cmake -DCMAKE_BUILD_TYPE=Release -DCMAKE_INSTALL_PREFIX=$YUTOVO_DEPLOY ..
- make -sj && make install
+ cmake -DCMAKE_BUILD_TYPE=Release -DBUILD_TESTS=OFF -DCMAKE_PREFIX_PATH=$YUTOVO_DEPLOY/lib/cmake -DCMAKE_INSTALL_PREFIX=$YUTOVO_DEPLOY ..
+ make -sj4 && make install
cd ../..
echo "Building mathgl"
cd mathgl-8.0.3
mkdir -p build && cd build
cmake -DCMAKE_BUILD_TYPE=Release -DCMAKE_INSTALL_LIBDIR=$YUTOVO_DEPLOY -Denable-openmp=False -Denable-png=False -Denable-opengl=False -DCMAKE_INSTALL_PREFIX=$YUTOVO_DEPLOY ..
- make -sj && make install
+ make -sj4 && make install
cd ../..
echo "Building libharu"
cd libharu
mkdir -p build && cd build
cmake -DCMAKE_BUILD_TYPE=Release -DBUILD_SHARED_LIBS=OFF -DCMAKE_INSTALL_PREFIX=$YUTOVO_DEPLOY ..
- make -sj && make install
+ make -sj4 && make install
cd ../..
mkdir -p $YUTOVO_DEPLOY/../third-party/stb_image
@@ -130,19 +122,20 @@
cd yutovo-editor
mkdir -p build && cd build
cmake -DCMAKE_BUILD_TYPE=Release -DBUILD_TESTS=OFF -DCMAKE_INSTALL_PREFIX=$YUTOVO_DEPLOY ..
- make -sj8 && make install
+ make -sj4 && make install
cd ../..
echo "Building yutovo-library"
cd yutovo-library
- ./pack.sh
+ mkdir -p $YUTOVO_DEPLOY/bin
+ ./make_library.sh $YUTOVO_DEPLOY/bin ZIP
cd ..
echo "Building yutovo-desktop"
cd yutovo-desktop
mkdir -p build && cd build
- cmake -DCMAKE_BUILD_TYPE=Release -DCMAKE_INSTALL_PREFIX=$YUTOVO_DEPLOY ..
- make -sj8 && make install
+ cmake -DCMAKE_BUILD_TYPE=Release -DBUILD_TESTS=OFF -DCMAKE_INSTALL_PREFIX=$YUTOVO_DEPLOY ..
+ make -sj4 && make install
cd ../..
}
@@ -160,8 +153,9 @@
mkdir -p $pkgdir/usr/share/yutovo/translations/
cp $YUTOVO_DEPLOY/bin/yutovo-desktop $pkgdir/usr/bin/
+ cp $YUTOVO_DEPLOY/bin/yutovo-solver-calculator-worker $pkgdir/usr/bin/
cp -r $srcdir/yutovo-desktop/build/src/*.qm $pkgdir/usr/share/yutovo/translations/
- cp -r $srcdir/yutovo-library/library $pkgdir/usr/share/yutovo/
+ cp -r $YUTOVO_DEPLOY/bin/library $pkgdir/usr/share/yutovo/
cp $srcdir/yutovo-desktop/setup/Arch/run.sh $pkgdir/usr/bin/yutovo
cp $srcdir/yutovo-desktop/setup/yutovo-16.png $pkgdir/usr/share/icons/hicolor/16x16/apps/yutovo.png
cp $srcdir/yutovo-desktop/setup/yutovo-32.png $pkgdir/usr/share/icons/hicolor/32x32/apps/yutovo.png
@@ -171,6 +165,8 @@
chmod g-w $pkgdir/usr/bin/yutovo-desktop
chmod o-w $pkgdir/usr/bin/yutovo-desktop
+ chmod g-w $pkgdir/usr/bin/yutovo-solver-calculator-worker
+ chmod o-w $pkgdir/usr/bin/yutovo-solver-calculator-worker
chmod +x $pkgdir/usr/bin/yutovo
chmod -R -w $pkgdir/usr/share/yutovo/library

Scan history

Scanned at (UTC)SeverityRules
2026-09-17 00:27:14 Low 2
2026-09-16 00:03:17 Low 2
2026-09-15 00:25:31 Low 2
2026-09-14 00:27:57 Low 2
2026-09-13 00:19:54 Low 2
2026-09-12 00:25:17 Low 2
2026-09-11 00:19:22 Low 2
2026-09-10 00:22:44 Low 2
2026-09-09 00:04:09 Low 2
2026-09-08 00:18:08 Low 2
2026-09-07 00:30:15 Low 2
2026-09-06 00:17:06 Low 2
2026-09-05 00:16:27 Low 2
2026-09-04 00:03:13 Low 2
2026-09-03 00:15:47 Low 2
2026-09-02 00:02:31 Low 2
2026-09-01 00:11:19 Low 2
2026-08-31 07:44:47 Medium 1
2026-08-31 00:19:57 Low 2
2026-08-30 00:04:14 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion