cidrtools

LOW

maintainer GeneArch 1 votes scanned 2026-08-20 13:11:31.763076

View on AUR

Why flagged

Package builds from a git source on GitHub with a SKIP'd checksum, but the source is from the project's own repository and the maintainer provides a verifiable PGP key; the flagged low votes and recent upload are minor concerns but do not indicate active malice.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 80%): Package builds from a git source on GitHub with a SKIP'd checksum, but the source is from the project's own repository and the maintainer provides a verifiable PGP key; the flagged low votes and recent upload are minor concerns but do not indicate active malice.

PKGBUILD

      1#
    
      2# cidrtools:
    
      3# Arch Linux PKGBUILD 
    
      4# This builds the latest release tag.
    
      5#
    
      6# Maintainer: Gene C <arch@sapience.com>
    
      7# Contributor: 
    
      8# 
    
      9pkgbase=cidrtools
    
      10pkgname=cidrtools 
    
      11pkgdesc="Compiled c-library of useful cidr tools plus hostcheck application"
    
      12
    
      13_gitname='cidrtools'
    
      14
    
      15pkgver="1.0.1"
    
      16pkgrel=1
    
      17url="https://github.com/gene-git/cidrtools"
    
      18
    
      19provides=(libcidrtools.so)
    
      20replaces=(hostcheck)
    
      21
    
      22arch=(x86_64)
    
      23license=('LGPL-3.0-or-later')
    
      24
    
      25options=(!strip !debug)
    
      26
    
      27depends=(
    
      28    glibc
    
      29)
    
      30optdepends=()
    
      31
    
      32makedepends=(
    
      33    gcc
    
      34    git
    
      35    meson
    
      36)
    
      37_mkpkg_depends=(
    
      38    'gcc>minor'
    
      39)
    
      40
    
      41checkdepends=(
    
      42)
    
      43
    
      44backup=()
    
      45
    
      46#
    
      47# Verifying Signed Tag
    
      48#   Add arch@sapience.com key to keyring then use the source line with "?signed"
    
      49#   Key available via keys/pgp, WKD or dowload from https://www.sapience.com/tech
    
      50#   Note that upstream release procedure requires every tagged release have new tag
    
      51#
    
      52validpgpkeys=( '7CCA1BA66669F3273DB52678E5B81343AB9809E1')   # Gene C <arch@sapience.com>
    
      53
    
      54#source=("git+https://github.com/gene-git/${_gitname}#tag=${pkgver}?signed")
    
      55source=("git+https://github.com/gene-git/${_gitname}#tag=${pkgver}")
    
      56sha512sums=('SKIP')
    
      57
    
      58changelog="Changelog"
    
      59
    
      60build() {
    
      61    cd "${_gitname}"
    
      62    echo "***"
    
      63    echo "Building:" 
    
      64    echo "***"
    
      65
    
      66    #
    
      67    # Compile flags are in meson.build - including C23 which is required.
    
      68    # Default cpu-level is x86-64-v3 - if you need to revert to pre 2013 hardware
    
      69    # Use : ./scriptes/do-build -cpu_level baseline
    
      70    #
    
      71    /usr/bin/rm -rf build/*
    
      72    export PATH="/usr/bin"
    
      73    export CFLAGS=""
    
      74    export LDFLAGS=""
    
      75
    
      76    ./scripts/do-build
    
      77}
    
      78
    
      79check() {
    
      80    cd "${_gitname}"
    
      81    echo "***"
    
      82    echo "Running test suite:"
    
      83    echo "***"
    
      84    
    
      85    ./scripts/run-tests
    
      86}
    
      87
    
      88package() {
    
      89    cd "${srcdir}/${_gitname}"
    
      90    echo "***"
    
      91    echo "Installing: libcidrtools"
    
      92    echo "***"
    
      93
    
      94    ./scripts/do-install "$pkgdir"
    
      95}
    
      96
    
      97

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-20 13:11:31	Low	2