chillspot

maintainer fvtronics · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds from a verifiable source tarball hosted on Codeberg, the project's official repository; the orphaned status and re-adoption do not imply malicious intent or supply chain risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from a verifiable source tarball hosted on Codeberg, the project's official repository; the orphaned status and re-adoption do not imply malicious intent or supply chain risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: Francisco V. <fvasquez dot public at fvtronics dot com>
    
      2pkgname=chillspot
    
      3pkgver=0.2.2
    
      4pkgrel=1
    
      5pkgdesc="Fan curve control and temperature monitor for MSI laptops"
    
      6arch=('x86_64')
    
      7url="https://codeberg.org/FVtronics/Chillspot"
    
      8license=('GPL-3.0-or-later')
    
      9depends=(
    
      10    'dbus'
    
      11    'gcc-libs'
    
      12    'glib2'
    
      13    'glibc'
    
      14    'gtk4'
    
      15    'libadwaita'
    
      16    'polkit'
    
      17    'systemd'
    
      18)
    
      19makedepends=(
    
      20    'appstream'
    
      21    'cargo'
    
      22    'desktop-file-utils'
    
      23    'gettext'
    
      24    'meson'
    
      25    'ninja'
    
      26    'pkgconf'
    
      27)
    
      28source=("$pkgname-$pkgver.tar.gz::$url/archive/v$pkgver.tar.gz")
    
      29sha256sums=('a1335b47d69cea2d8b95791dc2e695e200631e45d635f8781809d172463c017f')
    
      30
    
      31prepare() {
    
      32    cd "$pkgname"
    
      33
    
      34    export CARGO_HOME="$srcdir/cargo-home"
    
      35    cargo fetch --locked --target "$(rustc -vV | sed -n 's/host: //p')"
    
      36}
    
      37
    
      38build() {
    
      39    arch-meson "$pkgname" build \
    
      40        -Dcargo-home="$srcdir/cargo-home"
    
      41
    
      42    CARGO_NET_OFFLINE=true meson compile -C build
    
      43}
    
      44
    
      45check() {
    
      46    export CARGO_HOME="$srcdir/cargo-home"
    
      47    cargo test --frozen --manifest-path "$pkgname/Cargo.toml"
    
      48
    
      49    meson test -C build --print-errorlogs
    
      50}
    
      51
    
      52package() {
    
      53    meson install -C build --destdir "$pkgdir"
    
      54}
    
      55

Changes since previous scan

--- PKGBUILD @ 2026-07-27 00:24
+++ PKGBUILD @ 2026-08-03 00:08
@@ -1,6 +1,6 @@
 # Maintainer: Francisco V. <fvasquez dot public at fvtronics dot com>
 pkgname=chillspot
-pkgver=0.2.1
+pkgver=0.2.2
 pkgrel=1
 pkgdesc="Fan curve control and temperature monitor for MSI laptops"
 arch=('x86_64')
@@ -26,7 +26,7 @@
     'pkgconf'
 )
 source=("$pkgname-$pkgver.tar.gz::$url/archive/v$pkgver.tar.gz")
-sha256sums=('f7a256ac4c5f85d3f6ec460527506c9125f6949e55e964901dc46a96dde12a84')
+sha256sums=('a1335b47d69cea2d8b95791dc2e695e200631e45d635f8781809d172463c017f')
 
 prepare() {
     cd "$pkgname"

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 19:35:21	MEDIUM	1
2026-07-27 00:24:32	CLEAN	2
2026-07-26 17:32:42	MEDIUM	1
2026-07-26 00:07:32	CLEAN	2
2026-07-25 21:31:00	MEDIUM	1
2026-06-18 16:11:54	CLEAN	0