agents-anywhere-cli

LOW

maintainer Rinne 0 votes scanned 2026-10-06 00:13:36.889724

View on AUR

Why flagged

The package builds from a tagged GitHub release and includes a prebuilt Python wheel from PyPI, which is a normal practice for pure-Python dependencies; the only concern is the unverified git source (SKIP'd checksum), but the wheel is from a trusted host and the overall risk is low given the transparent build and packaging of legitimate project components.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a tagged GitHub release and includes a prebuilt Python wheel from PyPI, which is a normal practice for pure-Python dependencies; the only concern is the unverified git source (SKIP'd checksum), but the wheel is from a trusted host and the overall risk is low given the transparent build and packaging of legitimate project components.

PKGBUILD

      1# Maintainer: Rinne <aur@rinne.in>
    
      2
    
      3pkgname=agents-anywhere-cli
    
      4pkgver=2.0.3
    
      5pkgrel=1
    
      6pkgdesc='Local runtime connector for Agents Anywhere'
    
      7arch=('any')
    
      8url='https://github.com/anywhere-labs/Agents-Anywhere'
    
      9license=('unknown')
    
      10
    
      11depends=(
    
      12  'python>=3.12'
    
      13  'python-asyncer'
    
      14  'python-claude-agent-sdk'
    
      15  'python-httpx'
    
      16  'python-jsonschema>=4.26.0'
    
      17  'python-loguru'
    
      18  'python-pexpect>=4.9.0'
    
      19  'python-psutil>=7.2.2'
    
      20  'python-ptyprocess'
    
      21  'python-pydantic>=2.0.0'
    
      22  'python-pyte>=0.8.2'
    
      23  'python-python-socks>=2.8.1'
    
      24  'python-socksio'
    
      25  'python-websockets>=16.0'
    
      26  'openai-codex>=0.144.4'
    
      27)
    
      28
    
      29makedepends=(
    
      30  'git'
    
      31  'python-build'
    
      32  'python-hatchling'
    
      33  'python-installer'
    
      34)
    
      35
    
      36source=(
    
      37  "Agents-Anywhere::git+https://github.com/anywhere-labs/Agents-Anywhere.git#tag=v${pkgver}"
    
      38  "openai_codex-0.160.0-py3-none-any.whl::https://files.pythonhosted.org/packages/09/a6/3e848b805f31a9a736ee1e54f92c2457de2c4e9d0553404975f2bac2dd33/openai_codex-0.160.0-py3-none-any.whl"
    
      39)
    
      40sha256sums=(
    
      41  'SKIP'
    
      42  '61d2d855ca2ebedfd51280fbeb60ff31fc47ccbd55ebce186505e3f3da096921'
    
      43)
    
      44
    
      45build() {
    
      46  cd "${srcdir}/Agents-Anywhere/connector"
    
      47  python -m build --wheel --no-isolation
    
      48}
    
      49
    
      50package() {
    
      51  cd "${srcdir}/Agents-Anywhere/connector"
    
      52  python -m installer --destdir="${pkgdir}" dist/*.whl
    
      53
    
      54  # Agents Anywhere imports the Python openai_codex SDK directly. Arch's
    
      55  # openai-codex package provides the native Codex executable, while the
    
      56  # Python SDK is only available from PyPI, so install its pure-Python wheel
    
      57  # into this package rather than maintaining a separate AUR package.
    
      58  python -m installer --destdir="${pkgdir}" \
    
      59    "${srcdir}/openai_codex-0.160.0-py3-none-any.whl"
    
      60
    
      61  install -Dm644 README.md \
    
      62    "${pkgdir}/usr/share/doc/${pkgname}/README.md"
    
      63}
    
      64

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-06 00:13:36	Low	2
2026-10-05 23:40:58	Low	1