cwrap-git
maintainer orphaned
· 2 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The package builds from the project's own GitHub repository, uses SKIP for checksum due to git sources, and performs standard Python 2 build steps with minor shebang patching; no remote code execution or malicious payloads are present.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from the project's own GitHub repository, uses SKIP for checksum due to git sources, and performs standard Python 2 build steps with minor shebang patching; no remote code execution or malicious payloads are present.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
Recently orphaned & re-adopted
orphaned_readopted
This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.
PKGBUILD
1
# Maintainer: jyantis <yantis@yantis.net>
2
3
pkgname=cwrap-git
4
pkgver=0.0.r88.5387ade
5
pkgrel=2
6
pkgver=0.0.r1489.c522f6d
7
pkgdesc='Automatical generate Cython wrappers from C & C++ header files'
8
arch=('any')
9
url='https://github.com/geggo/cwrap'
10
license=('custom')
11
depends=('python2' 'llvm-libs' 'clang')
12
source=('git+https://github.com/geggo/cwrap.git')
13
sha256sums=('SKIP')
14
makedepends=('git' 'python2-setuptools')
15
provides=('cwrap')
16
conflicts=('cwrap')
17
18
pkgver() {
19
cd cwrap
20
set -o pipefail
21
_gitversion=$( git describe --long | sed -r 's/([^-]*-g)/r\1/;s/-/./g' ||
22
printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)" )
23
24
# If there is a setup.py then pull the version tag from the file
25
if [ -f "setup.py" ]; then
26
if grep --quiet "version = " setup.py; then
27
printf "%s.%s" "$(grep -R "version = " setup.py | awk -F\' '{print $2}')" $_gitversion | sed 's/-/./g'
28
elif grep --quiet "version=" setup.py; then
29
printf "%s.%s" "$(grep -R "version=" setup.py | awk -F\' '{print $2}')" $_gitversion | sed 's/-/./g'
30
else
31
printf "%s" $_gitversion
32
fi
33
else
34
printf "%s" $_gitversion
35
fi
36
}
37
38
build() {
39
cd cwrap
40
41
# Patch any #!/usr/bin/python to #!/usr/bin/python2
42
for file in $(find . -name '*.py' -print); do
43
sed -r -i 's_^#!.*/usr/bin/python(\s|$)_#!/usr/bin/python2_' $file
44
sed -r -i 's_^#!.*/usr/bin/env(\s)*python(\s|$)_#!/usr/bin/env python2_' $file
45
done
46
47
python2 setup.py build
48
}
49
50
51
package() {
52
cd cwrap
53
54
# We don't need anything related to git in the package
55
rm -rf .git*
56
57
python2 setup.py install --root="${pkgdir}" --optimize=1
58
59
# Install Readme as license since no license.
60
install -D -m644 README.rst "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
61
62
# Install Documentation
63
install -D -m644 README.rst "${pkgdir}/usr/share/doc/${pkgname}/README.rst"
64
}
65
66
# vim:set ts=2 sw=2 et:
67
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 01:12:32 | MEDIUM | 1 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |