sci-chemistry/ball depends on dev-qt/qtwebkit:4 which is ancient and will never see any security updates.
If it's not possible to disable this and there's no upstream port available, it might be time to consider removing this package.
No upstream release for years. Happy to see this being dropped.
Looking into this a bit further, qtwebkit is never actually used, and in fact was already dropped but the dependency was actually specified twice:
So I dropped the duplicate:
I see recent activity in upstream git master, so maybe there's hope for the future still.