astra-foundry-git

LOW
maintainer evertiro 0 votes scanned 2026-08-25 19:27:42.084104
View on AUR
Why flagged

The package builds from the project's own Git repository, which is normal for AUR packages; the low severity is due to few votes and recent upload, not malicious content.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from the project's own Git repository, which is normal for AUR packages; the low severity is due to few votes and recent upload, not malicious content.

PKGBUILD

1# Maintainer: Dan Griffiths <me at evertiro dot com>
2
3pkgname=astra-foundry-git
4pkgver=1.3.1.r0.g86e2e2a
5pkgrel=1
6pkgdesc='Unified package manager for Flatpak, Pacman, AUR, and AppImage.'
7arch=('x86_64')
8url='https://github.com/AstraSuite/Foundry'
9license=('GPL-3.0-only')
10depends=(
11 'glibc'
12 'libstdc++'
13 'qt6-base'
14 'qt6-declarative'
15 'qt6-m3shapes-git'
16 'qt6-shadertools'
17 'qt6-svg'
18)
19optdepends=(
20 'desktop-file-utils: support for AppImage packages'
21 'flatpak: support for flatpak packages'
22 'paru: support for AUR packages'
23 'yay: support for AUR packages'
24)
25makedepends=(
26 'cmake'
27 'git'
28 'qt6-tools'
29)
30source=(
31 "${pkgname}::git+${url}.git"
32)
33provides=('astra-foundry')
34conflicts=(
35 'astra-foundry'
36 'astra-foundry-bin'
37)
38sha256sums=(
39 'SKIP'
40)
41pkgver() {
42 cd "${srcdir}/${pkgname}"
43
44 git describe --long --tags --abbrev=7 | sed 's/^v//;s/\([^-]*-g\)/r\1/;s/-/./g'
45}
46build()
47{
48 cd "${srcdir}/${pkgname}"
49
50 cmake -B build -S . -DCMAKE_BUILD_TYPE=Release
51 cmake --build build
52}
53package()
54{
55 cd "${srcdir}/${pkgname}"
56
57 DESTDIR="$pkgdir" cmake --install build
58 install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
59}
60

Scan history

Scanned at (UTC)SeverityRules
2026-08-25 19:27:42 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion