gextant-git

LOW

maintainer SelfRef 0 votes scanned 2026-11-05 02:08:18.897367

View on AUR

Why flagged

The package builds from a public Git repository with a SKIP'd checksum, but it is a legitimate Rust project using standard build practices; the low severity is due to limited votes and recent upload, not malicious content.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a public Git repository with a SKIP'd checksum, but it is a legitimate Rust project using standard build practices; the low severity is due to limited votes and recent upload, not malicious content.

PKGBUILD

      1# Maintainer: SelfRef <arch@selfref.dev>
    
      2
    
      3_pkgbase=gextant
    
      4pkgname="$_pkgbase-git"
    
      5pkgver=0.1.0.r35.g61d4acf
    
      6pkgrel=1
    
      7pkgdesc='Updates GNOME Shell extensions from their repositories'
    
      8arch=('x86_64')
    
      9url='https://github.com/AperteDev/gextant'
    
      10license=('GPL-3.0-or-later')
    
      11depends=('gtk4' 'libadwaita>=1:1.7' 'libsecret' 'glib2' 'ca-certificates' 'libgcc' 'glibc')
    
      12optdepends=('org.freedesktop.secrets: keep the access tokens in the system keyring')
    
      13makedepends=('git' 'cargo' 'blueprint-compiler')
    
      14provides=("$_pkgbase")
    
      15conflicts=("$_pkgbase")
    
      16# GCC's LTO objects of ring's bundled C code don't link with rustc's lld.
    
      17options=('!lto')
    
      18source=("$_pkgbase::git+$url.git")
    
      19sha256sums=('SKIP')
    
      20
    
      21pkgver() {
    
      22	cd "$_pkgbase"
    
      23	# Before the first tag there is nothing to describe: the commits count from 0.1.0.
    
      24	if desc=$(git describe --long --tags --abbrev=7 2>/dev/null); then
    
      25		printf '%s\n' "$desc" | sed 's/\([^-]*-g\)/r\1/;s/-/./g;s/^v//'
    
      26	else
    
      27		printf '0.1.0.r%s.g%s\n' "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
    
      28	fi
    
      29}
    
      30
    
      31prepare() {
    
      32	cd "$_pkgbase"
    
      33	export RUSTUP_TOOLCHAIN=stable
    
      34	cargo fetch --locked --target "$(rustc --print host-tuple)"
    
      35}
    
      36
    
      37build() {
    
      38	cd "$_pkgbase"
    
      39	export RUSTUP_TOOLCHAIN=stable
    
      40	export CARGO_TARGET_DIR=target
    
      41	cargo build --frozen --release
    
      42}
    
      43
    
      44check() {
    
      45	cd "$_pkgbase"
    
      46	export RUSTUP_TOOLCHAIN=stable
    
      47	export CARGO_TARGET_DIR=target
    
      48	cargo test --frozen
    
      49}
    
      50
    
      51package() {
    
      52	cd "$_pkgbase"
    
      53	make install-data PREFIX=/usr DESTDIR="$pkgdir"
    
      54}
    
      55

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-05 02:08:18	Low	2