borg2

MEDIUM

maintainer tee 2 votes scanned 2026-08-24 03:21:59.346116

View on AUR

Why flagged

`pip install <package>` fetches an unpinned package from PyPI at build time, outside source=() and makepkg's checksums.

Triggered rules

Medium pip install of an external package pip_install_external

`pip install <package>` fetches an unpinned package from PyPI at build time, outside source=() and makepkg's checksums.

PKGBUILD:80 python-venv/bin/python -m pip install $_pkgname-$pkgver/dist/$_pkgname-$pkgver-*.whl pytest pytest-cov pytest-benchmark msgpack

PKGBUILD

1 offending line(s) highlighted

      1# Contributor: Ketmorco <ketmorco+aur@waynewerner.com>
    
      2# Contributor: RubenKelevra <cyrond@gmail.com>
    
      3# Contributor: Lukas Fleischer <lfleischer@archlinux.org>
    
      4# Contributor: Morten Linderud <foxboron@archlinux.org>
    
      5# Contributor: Vlad M. <vlad@archlinux.net>
    
      6# Contributor: Lahfa Samy <'akechishiro-aur' at domain 'lahfa.xyz'>
    
      7# Contributor: Lauri Niskanen <ape@ape3000.com>
    
      8# Contributor: tee < teeaur at duck dot com >
    
      9
    
      10pkgname=borg2
    
      11_pkgname=borgbackup
    
      12_borgstore_pkgver=0.6.1
    
      13_borghash_pkgver=0.2.0
    
      14pkgver=2.0.0b23
    
      15pkgrel=1
    
      16pkgdesc='Deduplicating backup program with compression and authenticated encryption'
    
      17url='https://borgbackup.org'
    
      18license=('BSD-3-Clause')
    
      19arch=('x86_64')
    
      20depends=(
    
      21	'acl'
    
      22	'lz4'
    
      23	'openssl'
    
      24	'xz'
    
      25	'zstd'
    
      26	'libdeflate'
    
      27	'python-argon2-cffi'
    
      28	"python-borgstore=${_borgstore_pkgver}"
    
      29	"python-borghash=${_borghash_pkgver}"
    
      30	'python-jsonargparse'
    
      31	'python-blake3'
    
      32	'python-msgpack'
    
      33	'python-packaging'
    
      34	'python-platformdirs'
    
      35	'python-shtab'
    
      36	'python-yaml'
    
      37)
    
      38makedepends=(
    
      39	'cython'
    
      40	'python-sphinx'
    
      41	'python-guzzle-sphinx-theme'
    
      42	'git'
    
      43	'python-pkgconfig'
    
      44	'python-build'
    
      45	'python-installer'
    
      46	'python-wheel'
    
      47	'python-setuptools'
    
      48	'python-setuptools-scm'
    
      49)
    
      50checkdepends=(
    
      51	'python-pytest'
    
      52	'python-pytest-cov'
    
      53	'python-pytest-benchmark'
    
      54	'python-dateutil'
    
      55)
    
      56optdepends=(
    
      57    'python-llfuse'
    
      58    'python-mfusepy'
    
      59    'python-pyfuse3'
    
      60    'python-textual'
    
      61)
    
      62provides=('borg' 'borgbackup')
    
      63conflicts=('borg' 'borgbackup')
    
      64_src='https://github.com/borgbackup/borg'
    
      65source=("$_src/releases/download/$pkgver/$_pkgname-$pkgver.tar.gz" #{,.asc}
    
      66#	"${_src}store/releases/download/$_borgstore_pkgver/borgstore-$_borgstore_pkgver.tar.gz"
    
      67)
    
      68b2sums=('0e516a57bc01bc9ce65e74e138492d95b1cd96aab12d09b75cd9b2f6f32a98eb1793480953d8b68a8aa242c8762f12e80e65d1737d8b5d33c7f5b333ef3f3e97')
    
      69validpgpkeys=('6D5BEF9ADD2075805747B70F9F88FB52FAF7B393') # Thomas Waldmann <tw@waldmann-edv.de>
    
      70
    
      71build() {
    
      72	#python -m build --wheel --no-isolation "borgstore-$_borgstore_pkgver"
    
      73	python -m build --wheel --no-isolation "$_pkgname-$pkgver"
    
      74}
    
      75
    
      76check() {
    
      77	python -m venv python-venv --prompt borg
    
      78	source python-venv/bin/activate
    
      79	#python-venv/bin/python -m pip install borgstore-${_borgstore_pkgver}/dist/borgstore-${_borgstore_pkgver}-py3-none-any.whl 
    
      80	python-venv/bin/python -m pip install $_pkgname-$pkgver/dist/$_pkgname-$pkgver-*.whl pytest pytest-cov pytest-benchmark msgpack
    
      81	cd "$_pkgname-$pkgver/build/lib.linux-$CARCH-"*/
    
      82	local skip='not test_non_ascii_acl and not test_with_socket and not test_socket_permissions'
    
      83	skip+=' and not shell_completions_test and not test_rclone_repo_basics and not test_zsh_completion_syntax'
    
      84	skip+=' and not test_prune_repository_example_interval and not test_prune_retain_and_expire_oldest'
    
      85	skip+=' and not test_spinner_colour'
    
      86	env LANG=en_US.UTF-8 PYTHONPATH="$PWD:$PYTHONPATH" "$srcdir/python-venv/bin/python" \
    
      87        -m pytest --cov=borg --benchmark-skip --pyargs borg.testsuite -v -k "$skip"
    
      88	deactivate
    
      89}
    
      90
    
      91package() {
    
      92	cd "$_pkgname-$pkgver"
    
      93
    
      94	python -m installer --compile-bytecode=2 --destdir="$pkgdir" dist/*.whl
    
      95	install -Dm644 docs/man/*.1 -t "$pkgdir/usr/share/man/man1/"
    
      96	install -Dm644 LICENSE -t "$pkgdir/usr/share/licenses/$pkgname/"
    
      97	install -Dm644 README.rst -t "$pkgdir/usr/share/doc/$pkgname/"
    
      98	cd "$pkgdir/usr/bin/"
    
      99	./borg completion bash 2>/dev/null | install -Dm644 /dev/stdin "$pkgdir/usr/share/bash-completion/completions/borg"
    
      100	./borg completion fish 2>/dev/null | install -Dm644 /dev/stdin "$pkgdir/usr/share/fish/vendor_completions.d/borg.fish"
    
      101	./borg completion tcsh 2>/dev/null | install -Dm644 /dev/stdin "$pkgdir/etc/profile.d/borg.tcsh"
    
      102	./borg completion zsh  2>/dev/null | install -Dm644 /dev/stdin "$pkgdir/usr/share/zsh/site-functions/_borg"
    
      103}
    
      104

Changes since previous scan

--- PKGBUILD @ 2026-07-22 15:20
+++ PKGBUILD @ 2026-08-24 03:21
@@ -9,9 +9,9 @@
 
 pkgname=borg2
 _pkgname=borgbackup
-_borgstore_pkgver=0.5.5
-_borghash_pkgver=0.1.0 #0.1.1 latest
-pkgver=2.0.0b22
+_borgstore_pkgver=0.6.1
+_borghash_pkgver=0.2.0
+pkgver=2.0.0b23
 pkgrel=1
 pkgdesc='Deduplicating backup program with compression and authenticated encryption'
 url='https://borgbackup.org'
@@ -33,6 +33,7 @@
 	'python-packaging'
 	'python-platformdirs'
 	'python-shtab'
+	'python-yaml'
 )
 makedepends=(
 	'cython'
@@ -52,33 +53,38 @@
 	'python-pytest-benchmark'
 	'python-dateutil'
 )
+optdepends=(
+    'python-llfuse'
+    'python-mfusepy'
+    'python-pyfuse3'
+    'python-textual'
+)
 provides=('borg' 'borgbackup')
 conflicts=('borg' 'borgbackup')
 _src='https://github.com/borgbackup/borg'
-source=("$_src/releases/download/$pkgver/$_pkgname-$pkgver.tar.gz"{,.asc}
-	"${_src}store/releases/download/$_borgstore_pkgver/borgstore-$_borgstore_pkgver.tar.gz"
+source=("$_src/releases/download/$pkgver/$_pkgname-$pkgver.tar.gz" #{,.asc}
+#	"${_src}store/releases/download/$_borgstore_pkgver/borgstore-$_borgstore_pkgver.tar.gz"
 )
-sha256sums=('fbc57a43caf4383d2e22597d54300e3a80cda470df6ba342c36e621b35d7cd8a'
-            'SKIP'
-            '8e96da6de8374206fa95cdac4c1c03798a07d4e0a4a4ad17c336e0dda1fe8c17')
+b2sums=('0e516a57bc01bc9ce65e74e138492d95b1cd96aab12d09b75cd9b2f6f32a98eb1793480953d8b68a8aa242c8762f12e80e65d1737d8b5d33c7f5b333ef3f3e97')
 validpgpkeys=('6D5BEF9ADD2075805747B70F9F88FB52FAF7B393') # Thomas Waldmann <tw@waldmann-edv.de>
 
 build() {
-	python -m build --wheel --no-isolation "borgstore-$_borgstore_pkgver"
+	#python -m build --wheel --no-isolation "borgstore-$_borgstore_pkgver"
 	python -m build --wheel --no-isolation "$_pkgname-$pkgver"
 }
 
 check() {
 	python -m venv python-venv --prompt borg
 	source python-venv/bin/activate
-	python-venv/bin/python -m pip install borgstore-${_borgstore_pkgver}/dist/borgstore-${_borgstore_pkgver}-py3-none-any.whl \
-      $_pkgname-$pkgver/dist/$_pkgname-$pkgver-*.whl pytest pytest-cov pytest-benchmark msgpack
+	#python-venv/bin/python -m pip install borgstore-${_borgstore_pkgver}/dist/borgstore-${_borgstore_pkgver}-py3-none-any.whl 
+	python-venv/bin/python -m pip install $_pkgname-$pkgver/dist/$_pkgname-$pkgver-*.whl pytest pytest-cov pytest-benchmark msgpack
 	cd "$_pkgname-$pkgver/build/lib.linux-$CARCH-"*/
+	local skip='not test_non_ascii_acl and not test_with_socket and not test_socket_permissions'
+	skip+=' and not shell_completions_test and not test_rclone_repo_basics and not test_zsh_completion_syntax'
+	skip+=' and not test_prune_repository_example_interval and not test_prune_retain_and_expire_oldest'
+	skip+=' and not test_spinner_colour'
 	env LANG=en_US.UTF-8 PYTHONPATH="$PWD:$PYTHONPATH" "$srcdir/python-venv/bin/python" \
-        -m pytest --cov=borg --benchmark-skip --pyargs borg.testsuite -v \
-		-k 'not test_non_ascii_acl and not test_with_socket and not test_socket_permissions and not shell_completions_test \
-        and not test_rclone_repo_basics and not test_zsh_completion_syntax'
-	# and not test_zsh_completion_syntax[archiver]
+        -m pytest --cov=borg --benchmark-skip --pyargs borg.testsuite -v -k "$skip"
 	deactivate
 }
 
@@ -86,12 +92,13 @@
 	cd "$_pkgname-$pkgver"
 
 	python -m installer --compile-bytecode=2 --destdir="$pkgdir" dist/*.whl
-
-#	install -Dm644 scripts/shell_completions/bash/borg -t "$pkgdir/usr/share/bash-completion/completions/"
-	install -Dm644 scripts/shell_completions/fish/borg.fish -t "$pkgdir/usr/share/fish/vendor_completions.d/"
-#	install -Dm644 scripts/shell_completions/zsh/_borg -t "$pkgdir/usr/share/zsh/site-functions/"
-
 	install -Dm644 docs/man/*.1 -t "$pkgdir/usr/share/man/man1/"
 	install -Dm644 LICENSE -t "$pkgdir/usr/share/licenses/$pkgname/"
+	install -Dm644 README.rst -t "$pkgdir/usr/share/doc/$pkgname/"
+	cd "$pkgdir/usr/bin/"
+	./borg completion bash 2>/dev/null | install -Dm644 /dev/stdin "$pkgdir/usr/share/bash-completion/completions/borg"
+	./borg completion fish 2>/dev/null | install -Dm644 /dev/stdin "$pkgdir/usr/share/fish/vendor_completions.d/borg.fish"
+	./borg completion tcsh 2>/dev/null | install -Dm644 /dev/stdin "$pkgdir/etc/profile.d/borg.tcsh"
+	./borg completion zsh  2>/dev/null | install -Dm644 /dev/stdin "$pkgdir/usr/share/zsh/site-functions/_borg"
 }
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-24 03:21:59	Medium	1
2026-07-22 15:20:42	Clean	0
2026-07-10 03:33:28	Clean	0
2026-06-18 16:11:54	Clean	0