1password-secret-service-beta-git

maintainer a_i · 0 votes · scanned 2026-08-18 00:03:42.021799
LOW
View on AUR ↗
Why flagged The package builds from a public Git repository with a SKIP'd checksum, but the source is the project's own code, and no untrusted prebuilt binaries or remote code execution are involved; low risk due to lack of verifiable integrity, but typical for git-based AUR packages.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a public Git repository with a SKIP'd checksum, but the source is the project's own code, and no untrusted prebuilt binaries or remote code execution are involved; low risk due to lack of verifiable integrity, but typical for git-based AUR packages.

PKGBUILD

1# Maintainer: Alex Indigo <ai@aegis.one>
2
3pkgname=1password-secret-service-beta-git
4_projname=1password-secret-service
5_release_ver=0.1.0.r0
6pkgver="${_release_ver}.g0000000"
7pkgrel=2
8pkgdesc="Freedesktop Secret Service (org.freedesktop.secrets) provider backed by 1Password (git version, for 1password-beta)"
9arch=('x86_64' 'aarch64')
10url="https://github.com/alexindigo/1password-secret-service"
11license=('GPL-3.0-or-later')
12depends=('1password-beta' 'sqlite' 'glibc')
13makedepends=('go' 'git')
14provides=('1password-secret-service')
15conflicts=('1password-secret-service' '1password-secret-service-beta' '1password-secret-service-git')
16source=("${pkgname}::git+${url}.git")
17sha256sums=('SKIP')
18
19pkgver() {
20 cd "${srcdir}/${pkgname}"
21 local out
22 out=$(git describe --long --tags 2>/dev/null) || out=""
23 if [ -n "$out" ]; then
24 printf "%s" "$out" | sed 's/\([^-]*-g\)/r\1/;s/-/./g;s/^v//'
25 else
26 echo "${_release_ver}.g$(git rev-parse --short HEAD)"
27 fi
28}
29
30build() {
31 cd "${srcdir}/${pkgname}"
32 export CGO_ENABLED=1
33 go build -trimpath -buildmode=pie -ldflags="-s -w" \
34 -o "${_projname}" "./cmd/${_projname}"
35}
36
37package() {
38 cd "${srcdir}/${pkgname}"
39 install -Dm755 "${_projname}" "${pkgdir}/usr/bin/${_projname}"
40 install -Dm644 packaging/1password-secret-service.service \
41 "${pkgdir}/usr/lib/systemd/user/1password-secret-service.service"
42 install -Dm644 packaging/org.freedesktop.secrets.service \
43 "${pkgdir}/usr/share/dbus-1/services/org.freedesktop.secrets.service"
44 install -Dm644 LICENSE \
45 "${pkgdir}/usr/share/licenses/${_projname}/LICENSE"
46}
47

Changes since previous scan

--- PKGBUILD @ 2026-08-16 09:32
+++ PKGBUILD @ 2026-08-18 00:03
@@ -4,7 +4,7 @@
_projname=1password-secret-service
_release_ver=0.1.0.r0
pkgver="${_release_ver}.g0000000"
-pkgrel=1
+pkgrel=2
pkgdesc="Freedesktop Secret Service (org.freedesktop.secrets) provider backed by 1Password (git version, for 1password-beta)"
arch=('x86_64' 'aarch64')
url="https://github.com/alexindigo/1password-secret-service"
@@ -12,7 +12,7 @@
depends=('1password-beta' 'sqlite' 'glibc')
makedepends=('go' 'git')
provides=('1password-secret-service')
-conflicts=('1password-secret-service' '1password-secret-service-git')
+conflicts=('1password-secret-service' '1password-secret-service-beta' '1password-secret-service-git')
source=("${pkgname}::git+${url}.git")
sha256sums=('SKIP')

Scan history

Scanned at (UTC)SeverityRules
2026-08-18 00:03:42 LOW 2
2026-08-17 00:18:29 LOW 2
2026-08-16 23:34:04 LOW 2
2026-08-16 09:32:18 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion