convey

LOW

maintainer yochananmarqos 0 votes scanned 2026-09-19 19:30:45.969940

View on AUR

Why flagged

The package builds from source hosted on GitLab under a GNOME-related namespace, with no evidence of malicious behavior; the low severity is due to few votes and recent upload, not code risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package builds from source hosted on GitLab under a GNOME-related namespace, with no evidence of malicious behavior; the low severity is due to few votes and recent upload, not code risk.

PKGBUILD

      1# Maintainer: Mark Wagie <mark dot wagie at proton dot me>
    
      2pkgname=convey
    
      3pkgver=50.2
    
      4pkgrel=1
    
      5pkgdesc="Email application built around conversations for the GNOME desktop."
    
      6arch=('x86_64')
    
      7url="https://gitlab.gnome.org/donnybeelo/convey"
    
      8license=(
    
      9  'CC-BY-3.0'
    
      10  'CC-BY-SA-3.0'
    
      11  'LGPL-2.1-or-later'
    
      12)
    
      13depends=(
    
      14  'evolution-data-server'
    
      15  'enchant'
    
      16  'folks'
    
      17  'gcr-4'
    
      18  'gmime3'
    
      19  'gnome-online-accounts'
    
      20  'gst-plugins-bad-libs'
    
      21  'gstreamer'
    
      22  'gtk4'
    
      23  'icu'
    
      24  'iso-codes'
    
      25  'json-glib'
    
      26  'libadwaita'
    
      27  'libgee'
    
      28  'libgoa'
    
      29  'libical'
    
      30  'libpeas-2'
    
      31  'libsecret'
    
      32  'libsoup3'
    
      33  'libstemmer'
    
      34  'libunwind'
    
      35  'libxml2'
    
      36  'libytnef'
    
      37  'org.freedesktop.secrets'
    
      38  'snowball'
    
      39  'sqlite'
    
      40  'webkitgtk-6.0'
    
      41)
    
      42makedepends=(
    
      43  'gobject-introspection'
    
      44  'itstool'
    
      45  'meson'
    
      46  'vala'
    
      47)
    
      48checkdepends=(
    
      49  'appstream'
    
      50  # 'aspell'
    
      51  'desktop-file-utils'
    
      52  # 'hspell'
    
      53  # 'hunspell'
    
      54  # 'libvoikko'
    
      55  # 'nuspell'
    
      56  # 'xorg-server-xvfb'
    
      57)
    
      58conflicts=('geary')
    
      59source=("$url/-/archive/$pkgver/$pkgname-$pkgver.tar.gz")
    
      60sha256sums=('ffd8bbace9e4f23003f47278b8506009ac81a637852ba55fe5fe6d3f84e99116')
    
      61
    
      62build() {
    
      63  arch-meson "$pkgname-$pkgver" build -Dprofile=release
    
      64  meson compile -C build
    
      65}
    
      66
    
      67check() {
    
      68  # export LIBGL_ALWAYS_SOFTWARE=1
    
      69  # xvfb-run -a dbus-run-session -- meson test -C build --no-stdsplit --no-rebuild --print-errorlogs
    
      70
    
      71  appstreamcli validate --no-net build/desktop/net.donnybeelo.Convey.metainfo.xml
    
      72  desktop-file-validate build/desktop/*.desktop
    
      73}
    
      74
    
      75package() {
    
      76  meson install -C build --no-rebuild --destdir "$pkgdir"
    
      77}
    
      78

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-19 19:30:45	Low	2