addwater-git

LOW
maintainer nvidiahater 0 votes scanned 2026-10-21 00:12:50.227280
View on AUR
Why flagged

The package builds from a public Git repository with a SKIP'd checksum, but it is a legitimate project source using standard AUR build practices; the low severity is due to few votes and recent upload, not malicious content.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a public Git repository with a SKIP'd checksum, but it is a legitimate project source using standard AUR build practices; the low severity is due to few votes and recent upload, not malicious content.

PKGBUILD

1pkgname=addwater-git
2pkgver=1.3.r64.g09ca91a
3pkgrel=1
4pkgdesc="Installer and configuration tool for the Firefox GNOME theme (Git version)"
5arch=('any')
6url="https://github.com/largestgithubuseronearth/addwater"
7license=('GPL-3.0-or-later')
8depends=(
9 'glib2'
10 'gtk4>=4.22'
11 'libadwaita>=1.9.0'
12 'libportal>=0.9.1'
13 'libportal-gtk4>=0.9.1'
14 'python'
15 'python-gobject'
16 'python-packaging'
17 'python-requests'
18)
19makedepends=(
20 'appstream'
21 'desktop-file-utils'
22 'gettext'
23 'git'
24 'glib2-devel'
25 'libxml2'
26 'meson'
27)
28provides=("addwater=${pkgver}")
29conflicts=('addwater')
30source=("addwater::git+${url}.git#branch=main")
31sha256sums=('SKIP')
32
33pkgver() {
34 cd addwater
35 git describe --long --tags --abbrev=7 | sed 's/^v//;s/\([^-]*-g\)/r\1/;s/-/./g'
36}
37
38prepare() {
39 # Use the current path helper after upstream removed utils.paths.
40 sed -i \
41 -e 's/from \.utils\.paths import LOG_DIR/from .model.paths import aw_cache_dir/' \
42 -e 's/join(LOG_DIR, /join(aw_cache_dir(), "logs", /' \
43 addwater/src/window.py
44}
45
46build() {
47 arch-meson addwater build -Dprofile=default -Dtests=false
48 meson compile -C build
49}
50
51package() {
52 meson install -C build --destdir "${pkgdir}"
53}
54

Scan history

Scanned at (UTC)SeverityRules
2026-10-21 00:12:50 Low 2
2026-10-20 23:29:39 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion