acer-wmi-linuwu-dkms-git

LOW

maintainer adityaruplaha 0 votes scanned 2026-09-27 13:18:29.354985

View on AUR

Why flagged

The package builds a DKMS driver from a public Git repository with no tags, using a dynamically generated version; the source is transparent and from the maintainer's own project, but the SKIP'd checksum and recent upload with few votes slightly increase supply-chain risk, though no malicious behavior is evident.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds a DKMS driver from a public Git repository with no tags, using a dynamically generated version; the source is transparent and from the maintainer's own project, but the SKIP'd checksum and recent upload with few votes slightly increase supply-chain risk, though no malicious behavior is evident.

PKGBUILD

      1# Maintainer: Adityarup Laha <me at adityaruplaha dot me>
    
      2
    
      3_pkgname=acer-wmi-linuwu
    
      4pkgname=acer-wmi-linuwu-dkms-git
    
      5pkgver=7.3.0.1.r68.92e9d21
    
      6pkgrel=1
    
      7pkgdesc='Acer WMI laptop extras driver with NitroSense and PredatorSense settings (DKMS)'
    
      8arch=('x86_64')
    
      9url='https://github.com/adityaruplaha/acer-wmi-linuwu'
    
      10license=('GPL-2.0-or-later')
    
      11depends=('dkms')
    
      12makedepends=('git')
    
      13provides=("${pkgname%-git}=${pkgver}"
    
      14          "${_pkgname}=${pkgver}"
    
      15          'ACER-WMI-MODULE')
    
      16# The Linuwu-Sense packages build linuwu_sense, which binds the same acer-wmi
    
      17# platform device, and linuwu-sense-an515-55-dkms also blacklists acer_wmi.
    
      18conflicts=("${pkgname%-git}"
    
      19           "${_pkgname}"
    
      20           'linuwu-sense-dkms'
    
      21           'linuwu-sense-an515-55-dkms')
    
      22install="${pkgname}.install"
    
      23source=("${_pkgname}::git+${url}.git")
    
      24sha256sums=('SKIP')
    
      25
    
      26pkgver() {
    
      27  cd "${_pkgname}"
    
      28  # The release is the version in dkms.conf, as the repository has no tags
    
      29  printf '%s.r%s.%s' \
    
      30    "$(sed -n 's/^PACKAGE_VERSION="\(.*\)"$/\1/p' dkms.conf)" \
    
      31    "$(git rev-list --count HEAD)" \
    
      32    "$(git rev-parse --short=7 HEAD)"
    
      33}
    
      34
    
      35package() {
    
      36  cd "${_pkgname}"
    
      37  local _dest="${pkgdir}/usr/src/${_pkgname}-${pkgver}"
    
      38
    
      39  install -Dm644 -t "${_dest}" dkms.conf
    
      40  install -Dm644 -t "${_dest}/src" src/Kbuild src/acer-wmi.c
    
      41
    
      42  # DKMS requires PACKAGE_VERSION to match the source directory's version
    
      43  sed -i "s/^PACKAGE_VERSION=.*/PACKAGE_VERSION=\"${pkgver}\"/" "${_dest}/dkms.conf"
    
      44  grep -qx "PACKAGE_VERSION=\"${pkgver}\"" "${_dest}/dkms.conf"
    
      45
    
      46  install -Dm644 -t "${pkgdir}/usr/share/doc/${pkgname}" \
    
      47    README.md Documentation/ABI/testing/sysfs-platform-acer-wmi
    
      48}
    
      49

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-27 13:18:29	Low	2