cashlyctl-git

maintainer vladimirbelsch · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds from the project's own Git repository, which is normal for AUR packages; the low severity is due to few votes and recent upload, not malicious content.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package builds from the project's own Git repository, which is normal for AUR packages; the low severity is due to few votes and recent upload, not malicious content.

PKGBUILD

      1# Maintainer: Cashly Engineering <engineering@gocashly.io>
    
      2
    
      3pkgname=cashlyctl-git
    
      4_pkgname=cashlyctl
    
      5pkgver=0.1.0.r4.gbde52da
    
      6pkgrel=1
    
      7pkgdesc="Terminal operations console and CLI for Cashly/DealSense deployments"
    
      8arch=("any")
    
      9url="https://github.com/goCashly/cashlyctl"
    
      10license=("custom")
    
      11depends=(
    
      12  "python"
    
      13  "python-boto3"
    
      14  "python-pyfiglet"
    
      15  "python-textual"
    
      16  "python-typer"
    
      17)
    
      18makedepends=(
    
      19  "git"
    
      20  "python-build"
    
      21  "python-installer"
    
      22  "python-setuptools"
    
      23  "python-wheel"
    
      24)
    
      25provides=("cashlyctl")
    
      26conflicts=("cashlyctl")
    
      27source=("${_pkgname}::git+https://github.com/goCashly/cashlyctl.git#branch=main")
    
      28sha256sums=("SKIP")
    
      29
    
      30pkgver() {
    
      31  cd "$srcdir/${_pkgname}"
    
      32  python - <<'PY'
    
      33import pathlib
    
      34import subprocess
    
      35import tomllib
    
      36
    
      37version = tomllib.loads(pathlib.Path("pyproject.toml").read_text())["project"]["version"]
    
      38pathspecs = [".", ":(exclude)packaging/aur/cashlyctl-git"]
    
      39count = subprocess.check_output(
    
      40    ["git", "rev-list", "--count", "HEAD", "--", *pathspecs],
    
      41    text=True,
    
      42).strip()
    
      43short = subprocess.check_output(
    
      44    ["git", "log", "-1", "--format=%h", "--", *pathspecs],
    
      45    text=True,
    
      46).strip()
    
      47print(f"{version}.r{count}.g{short}")
    
      48PY
    
      49}
    
      50
    
      51build() {
    
      52  cd "$srcdir/${_pkgname}"
    
      53  python -m build --wheel --no-isolation
    
      54}
    
      55
    
      56package() {
    
      57  cd "$srcdir/${_pkgname}"
    
      58  python -m installer --destdir="$pkgdir" dist/*.whl
    
      59
    
      60  install -Dm644 LICENSE "$pkgdir/usr/share/licenses/${pkgname}/LICENSE"
    
      61  install -Dm644 README.md "$pkgdir/usr/share/doc/${pkgname}/README.md"
    
      62  install -Dm644 docs/cashlycrm-auth.md "$pkgdir/usr/share/doc/${pkgname}/cashlycrm-auth.md"
    
      63  install -Dm644 docs/docker.md "$pkgdir/usr/share/doc/${pkgname}/docker.md"
    
      64  install -Dm644 docs/global-hotkey-companion.md "$pkgdir/usr/share/doc/${pkgname}/global-hotkey-companion.md"
    
      65  install -Dm644 docs/native-linux.md "$pkgdir/usr/share/doc/${pkgname}/native-linux.md"
    
      66}
    
      67

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 03:10:20	LOW	2