gcompris-qt-git

maintainer mariajuhasz · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged Package builds from the project's official Git repository and includes a patch from a KDE commit; the orphaned/re-adopted status is a metadata concern, not a security risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): Package builds from the project's official Git repository and includes a patch from a KDE commit; the orphaned/re-adopted status is a metadata concern, not a security risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: Jose Riha <jose1711 gmail com>
    
      2# adopted from https://github.com/KaOSx/apps/tree/master/gcompris
    
      3
    
      4pkgname=gcompris-qt-git
    
      5_pkgname=gcompris-qt
    
      6pkgver=r8495.9930f99f9
    
      7pkgrel=1
    
      8pkgdesc="High quality educational software suite comprising of numerous activities for children aged 2 to 10 - git (Qt version)"
    
      9arch=('x86_64' 'i686')
    
      10url="http://gcompris.net/"
    
      11license=('GPL3')
    
      12depends=('qt5-multimedia' 'qt5-tools' 'qt5-declarative' 'qt5-svg' 'qt5-graphicaleffects' 'qt5-sensors'
    
      13         'qml-box2d')
    
      14makedepends=('texinfo' 'intltool' 'git' 'extra-cmake-modules' 'python2' 'qt5-tools' 'git')
    
      15provides=('gcompris-qt')
    
      16conflicts=('gcompris-qt')
    
      17source=($_pkgname::git+https://github.com/gcompris/GCompris-qt
    
      18        'gcompris-qt.desktop'
    
      19        'gcompris-qt.png'
    
      20        'https://github.com/KDE/gcompris/commit/134db8042f25b0446523653d9a8829916eda3006.diff')
    
      21md5sums=('SKIP'
    
      22         '4c64dcff4d8d4374aff551dd3f0e3441'
    
      23         '7c7cee3479f1a47376db800b2bc37017'
    
      24         '6afef263379444064f2638fe20780098')
    
      25
    
      26pkgver() {
    
      27  cd "$srcdir/${_pkgname}"
    
      28  printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
    
      29  }
    
      30
    
      31build() {
    
      32  [ ! -d build ] && mkdir build
    
      33  
    
      34  cd build 
    
      35  cmake ../${_pkgname} \
    
      36    -DCMAKE_INSTALL_PREFIX=/usr \
    
      37    -DCMAKE_BUILD_TYPE=Release \
    
      38    -DCMAKE_SKIP_RPATH=ON \
    
      39    -DQML_BOX2D_MODULE=system \
    
      40    -DQML_BOX2D_LIBRARY=/usr/lib/qt/qml/Box2D.2.0/ \
    
      41    -DLCONVERT_EXECUTABLE=/usr/bin/lconvert \
    
      42    -DLRELEASE_EXECUTABLE=/usr/bin/lrelease
    
      43  make 
    
      44  make BuildTranslations
    
      45}
    
      46
    
      47package() {
    
      48  cd build
    
      49  make DESTDIR=${pkgdir} install
    
      50  
    
      51  install -Dm644 ${srcdir}/gcompris-qt.desktop ${pkgdir}/usr/share/applications/gcompris-qt.desktop             
    
      52  install -Dm644 ${srcdir}/gcompris-qt.png ${pkgdir}/usr/share/pixmaps/gcompris-qt.png
    
      53}
    
      54

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 17:15:21	MEDIUM	1
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 01:18:42	MEDIUM	1
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 01:12:32	MEDIUM	1
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2