carve-rs

LOW

maintainer alerque 0 votes scanned 2026-08-27 09:31:53.985574

View on AUR

Why flagged

The package builds from source hosted on the project's official GitHub repository; the low severity is due to few votes and recent upload, not malicious content.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from source hosted on the project's official GitHub repository; the low severity is due to few votes and recent upload, not malicious content.

PKGBUILD

      1# Maintainer: Caleb Maclennan <caleb@alerque.com>
    
      2
    
      3pkgname=carve-rs
    
      4pkgver=0.1.4
    
      5pkgrel=1
    
      6pkgdesc='Rust parser and HTML renderer for the Carve markup language'
    
      7arch=(x86_64)
    
      8url="https://github.com/markup-carve/$pkgname"
    
      9license=(MIT)
    
      10depends=(glibc # libc.so
    
      11         libgcc)
    
      12makedepends=(cargo)
    
      13_archive="$pkgname-$pkgver"
    
      14source=("$url/archive/refs/tags/$pkgver/$_archive.tar.gz")
    
      15sha256sums=('ad0f7e70a78429f2dc2c848863fd1318b687bcda8aebb9441cd7c8945a6a8570')
    
      16
    
      17_srcenv() {
    
      18	cd "$_archive"
    
      19	export CARGO_HOME="$srcdir"
    
      20	export CARGO_PROFILE_RELEASE_DEBUG=2
    
      21	export CARGO_PROFILE_RELEASE_STRIP=false
    
      22	export CARGO_PROFILE_RELEASE_LTO=thin
    
      23	export CARGO_PROFILE_RELEASE_CODEGEN_UNITS=1
    
      24	export CARGO_PROFILE_RELEASE_OPT_LEVEL=3
    
      25	CFLAGS+=' -fno-fto'
    
      26	export RUSTUP_TOOLCHAIN=stable
    
      27	export CARGO_TARGET_DIR=target
    
      28}
    
      29
    
      30prepare() {
    
      31	_srcenv
    
      32	# Upstream project neglected to trock the lock file at all, this package will *not*
    
      33	# be reproducible. See https://github.com/markup-carve/carve-rs/issues/1466
    
      34	cargo update
    
      35	cargo fetch --locked --target host-tuple
    
      36}
    
      37
    
      38build() {
    
      39	_srcenv
    
      40	cargo build --frozen --release
    
      41}
    
      42
    
      43check() {
    
      44	_srcenv
    
      45	cargo test --frozen
    
      46}
    
      47
    
      48package() {
    
      49	depends+=(libgcc_s.so)
    
      50	cd "$_archive"
    
      51	install -Dm0755 -t "$pkgdir/usr/bin/" "target/release/${pkgname%-rs}"
    
      52	install -Dm0644 -t "$pkgdir/usr/share/licenses/$pkgname/" LICENSE
    
      53}
    
      54

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-27 09:31:53	Low	2