123pan

LOW

maintainer xhdndmm 0 votes scanned 2026-09-25 01:45:24.583274

View on AUR

Why flagged

The package builds from the project's own GitHub source with a SKIP'd checksum on the git checkout, which is common for git-based AUR packages; the only notable risk is the unverifiable source due to skipped integrity check, but it installs only Python code from the declared repository and no remote code execution or data exfiltration is present.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from the project's own GitHub source with a SKIP'd checksum on the git checkout, which is common for git-based AUR packages; the only notable risk is the unverifiable source due to skipped integrity check, but it installs only Python code from the declared repository and no remote code execution or data exfiltration is present.

PKGBUILD

      1# Maintainer: xhdndmm <xhdndmm@gmail.com>
    
      2
    
      3pkgname=123pan
    
      4pkgver=4.0.5
    
      5pkgrel=1
    
      6
    
      7pkgdesc="第三方123云盘客户端"
    
      8arch=('x86_64')
    
      9url="https://github.com/123panNextGen/123pan"
    
      10license=('GPL-3.0')
    
      11
    
      12depends=('python')
    
      13makedepends=('git' 'uv')
    
      14
    
      15options=('!strip' '!debug')
    
      16
    
      17source=(
    
      18  "${pkgname}-${pkgver}::git+https://github.com/123panNextGen/${pkgname}.git#tag=v${pkgver}"
    
      19  "${pkgname}.png::https://raw.githubusercontent.com/123panNextGen/logo/refs/heads/main/img/logo-v2.png"
    
      20)
    
      21
    
      22sha256sums=(
    
      23  'SKIP'
    
      24  'edc9c43937c0fa612be160a83265756dea36566c3f227165ccb7010b0a84ccff'
    
      25)
    
      26
    
      27build() {
    
      28    cd "${srcdir}/${pkgname}-${pkgver}"
    
      29
    
      30    uv venv \
    
      31        --python python \
    
      32        .venv
    
      33
    
      34    uv sync \
    
      35        --active \
    
      36        --frozen
    
      37}
    
      38
    
      39package() {
    
      40    cd "${srcdir}/${pkgname}-${pkgver}"
    
      41
    
      42    install -dm755 "${pkgdir}/opt/${pkgname}"
    
      43
    
      44    cp -a src "${pkgdir}/opt/${pkgname}/"
    
      45    cp -a pyproject.toml "${pkgdir}/opt/${pkgname}/"
    
      46    cp -a uv.lock "${pkgdir}/opt/${pkgname}/"
    
      47    cp -a .venv "${pkgdir}/opt/${pkgname}/"
    
      48
    
      49    install -dm755 "${pkgdir}/usr/bin"
    
      50
    
      51    cat > "${pkgdir}/usr/bin/${pkgname}" <<EOF
    
      52#!/bin/sh
    
      53exec /opt/${pkgname}/.venv/bin/python /opt/${pkgname}/src/123pan.py "\$@"
    
      54EOF
    
      55
    
      56    chmod 755 "${pkgdir}/usr/bin/${pkgname}"
    
      57
    
      58    install -Dm644 \
    
      59        "${srcdir}/${pkgname}.png" \
    
      60        "${pkgdir}/usr/share/pixmaps/${pkgname}.png"
    
      61}
    
      62

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-25 01:45:24	Low	2