fcitx5-commit-git
The package builds from a public Git repository with a SKIP'd checksum, but the source is from the maintainer's own GitHub account and appears to be a legitimate fcitx5 addon; the risk is low as it involves no remote code execution or untrusted prebuilt binaries.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a public Git repository with a SKIP'd checksum, but the source is from the maintainer's own GitHub account and appears to be a legitimate fcitx5 addon; the risk is low as it involves no remote code execution or untrusted prebuilt binaries.
PKGBUILD
# Maintainer: Vendetta1871
pkgname=fcitx5-commit-git
pkgver=r1.ebdf77c
pkgrel=1
pkgdesc="fcitx5 addon that lets other programs insert text into the focused input field over D-Bus"
arch=('x86_64')
url="https://github.com/Vendetta1871/fcitx5-commit"
license=('GPL-3.0-or-later')
depends=('fcitx5' 'glibc' 'libgcc' 'libstdc++')
makedepends=('cmake' 'git')
provides=('fcitx5-commit')
conflicts=('fcitx5-commit')
source=("fcitx5-commit::git+https://github.com/Vendetta1871/fcitx5-commit.git")
sha256sums=('SKIP')
pkgver() {
cd "$srcdir/fcitx5-commit"
printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
}
build() {
cmake -B build -S "$srcdir/fcitx5-commit" \
-DCMAKE_BUILD_TYPE=None \
-DCMAKE_INSTALL_PREFIX=/usr
cmake --build build
}
package() {
DESTDIR="$pkgdir" cmake --install build
install -Dm644 "$srcdir/fcitx5-commit/LICENSE" \
"$pkgdir/usr/share/licenses/$pkgname/LICENSE"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-27 15:19:08 | Low | 2 |