calibre-plugin-crosspoint

LOW

maintainer wahrwolf 0 votes scanned 2026-09-06 09:10:50.549465

View on AUR

Why flagged

The package downloads a source zip from the project's official GitHub releases, which is a normal and expected practice; the low severity is due to few votes and recent upload, not inherent risk in the build process.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a source zip from the project's official GitHub releases, which is a normal and expected practice; the low severity is due to few votes and recent upload, not inherent risk in the build process.

PKGBUILD

      1# Maintainer: Vincent Dahmen <wahrwolf@archlinux.org>
    
      2pkgname=calibre-plugin-crosspoint
    
      3pkgver=0.2.7
    
      4pkgrel=1
    
      5pkgdesc="Calibre Plugin to Sync CrossPoint Devices with Library- Calibre Plugin"
    
      6arch=('any')
    
      7url="https://github.com/crosspoint-reader/calibre-plugins/"
    
      8license=('MIT')
    
      9depends=('calibre>=2.0.0')
    
      10source=("https://github.com/crosspoint-reader/calibre-plugins/releases/download/v${pkgver}/crosspoint_reader-v${pkgver}.zip")
    
      11noextract=("crosspoint-${pkgver}.zip")
    
      12sha256sums=('466a2b5fc6496faec40c498c625105971038066a01271fa3e7a3ad5befa2adf2')
    
      13package() {
    
      14	install -m644 -D "${srcdir}/crosspoint_reader-v${pkgver}.zip" "${pkgdir}/usr/share/calibre/system-plugins/crosspoint-${pkgver}.zip"
    
      15}
    
      16
    
      17

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-06 09:10:50	Low	2