foldav-git

LOW

maintainer SelfRef 0 votes scanned 2026-11-05 02:08:18.897367

View on AUR

Why flagged

The package builds from the project's own Git repository, which is normal for AUR packages; the low severity is due to few votes and recent upload, not malicious content.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from the project's own Git repository, which is normal for AUR packages; the low severity is due to few votes and recent upload, not malicious content.

PKGBUILD

      1# Maintainer: SelfRef <arch@selfref.dev>
    
      2
    
      3_pkgbase=foldav
    
      4pkgname="$_pkgbase-git"
    
      5pkgver=0.0.0.r0.g0000000
    
      6pkgrel=1
    
      7pkgdesc='A file manager for the files in your Nextcloud'
    
      8arch=('x86_64')
    
      9url='https://github.com/AperteDev/foldav'
    
      10license=('GPL-3.0-or-later')
    
      11depends=('gtk4' 'libadwaita>=1:1.8' 'libsecret' 'sqlite' 'glib2' 'libgcc' 'glibc')
    
      12optdepends=('gnome-online-accounts: sign in with a GNOME Online Accounts account'
    
      13            'org.freedesktop.secrets: keep the passwords in the system keyring')
    
      14makedepends=('git' 'cargo' 'blueprint-compiler' 'gettext')
    
      15provides=("$_pkgbase")
    
      16conflicts=("$_pkgbase")
    
      17# GCC's LTO objects of ring's bundled C code don't link with rustc's lld.
    
      18options=('!lto')
    
      19source=("$_pkgbase::git+$url.git")
    
      20sha256sums=('SKIP')
    
      21
    
      22pkgver() {
    
      23	cd "$_pkgbase"
    
      24	# Before the first release's tag there is nothing to describe: 0.0.0 sorts below it.
    
      25	if described=$(git describe --long --tags --abbrev=7 2>/dev/null); then
    
      26		echo "$described" | sed 's/\([^-]*-g\)/r\1/;s/-/./g;s/^v//'
    
      27	else
    
      28		printf '0.0.0.r%s.g%s\n' "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
    
      29	fi
    
      30}
    
      31
    
      32prepare() {
    
      33	cd "$_pkgbase"
    
      34	export RUSTUP_TOOLCHAIN=stable
    
      35	cargo fetch --locked --target "$(rustc --print host-tuple)"
    
      36}
    
      37
    
      38build() {
    
      39	cd "$_pkgbase"
    
      40	export RUSTUP_TOOLCHAIN=stable
    
      41	export CARGO_TARGET_DIR=target
    
      42	cargo build --frozen --release -p foldav-linux
    
      43}
    
      44
    
      45check() {
    
      46	cd "$_pkgbase"
    
      47	export RUSTUP_TOOLCHAIN=stable
    
      48	export CARGO_TARGET_DIR=target
    
      49	cargo test --frozen --workspace
    
      50}
    
      51
    
      52package() {
    
      53	cd "$_pkgbase/foldav/linux"
    
      54	make install-data PREFIX=/usr DESTDIR="$pkgdir"
    
      55}
    
      56

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-05 02:08:18	Low	2