gitee-cli-git

LOW

maintainer taotieren 0 votes scanned 2026-11-03 08:04:08.432872

View on AUR

Why flagged

The package builds from the official Gitee CLI Git repository, uses a SKIP'd checksum due to the git source, and compiles the code locally with standard Go tooling; while the host is not on a whitelist and votes are few, this is a normal AUR pattern for git-based packages with no evidence of malicious behavior.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from the official Gitee CLI Git repository, uses a SKIP'd checksum due to the git source, and compiles the code locally with standard Go tooling; while the host is not on a whitelist and votes are few, this is a normal AUR pattern for git-based packages with no evidence of malicious behavior.

PKGBUILD

      1# Maintainer: taotieren <admin@taotieren.com>
    
      2
    
      3pkgname=gitee-cli-git
    
      4pkgver=0.3.3.r0.gb9500a1
    
      5pkgrel=1
    
      6pkgdesc="Gitee CLI is a tool which interact with gitee server seamlessly via terminal"
    
      7arch=($CARCH)
    
      8url="https://gitee.com/oschina/gitee-cli"
    
      9license=('MIT')
    
      10provides=(${pkgname%-git})
    
      11conflicts=(${pkgname%-git})
    
      12#replaces=(${pkgname})
    
      13depends=()
    
      14makedepends=(
    
      15    git
    
      16    go
    
      17)
    
      18optdepends=(
    
      19    'gitee-lfs-multipart-uploader: Gitee LFS high-speed object storage direct transfer tool'
    
      20    'mcp-gitee: Gitee MCP Server is a Model Context Protocol (MCP) server implementation for Gitee'
    
      21    'mcp-gitee-ent: Gitee Enterprise MCP Server is a Model Context Protocol (MCP) server implementation for Gitee Enterprise.'
    
      22)
    
      23backup=()
    
      24options=('!strip' '!debug')
    
      25#install=${pkgname}.install
    
      26source=("${pkgname}::git+${url}.git")
    
      27sha256sums=('SKIP')
    
      28
    
      29pkgver() {
    
      30    cd "${srcdir}/${pkgname}"
    
      31    (
    
      32        set -o pipefail
    
      33        git describe --long --tag --abbrev=7 2>/dev/null | sed 's/^[vV]//g;s/\([^-]*-g\)/r\1/;s/-/./g' ||
    
      34            printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
    
      35    )
    
      36}
    
      37
    
      38prepare() {
    
      39    git -C "${srcdir}/${pkgname}" clean -dfx
    
      40}
    
      41
    
      42build() {
    
      43    cd "${srcdir}/${pkgname}"
    
      44    export CGO_CPPFLAGS="${CPPFLAGS}"
    
      45    export CGO_CFLAGS="${CFLAGS}"
    
      46    export CGO_CXXFLAGS="${CXXFLAGS}"
    
      47    export CGO_LDFLAGS="${LDFLAGS}"
    
      48    export GOFLAGS="-buildmode=pie -trimpath -ldflags=-linkmode=external -mod=readonly -modcacherw"
    
      49    export GO111MODULE=on
    
      50    export GOPROXY=https://goproxy.cn,direct
    
      51
    
      52    mkdir -pv build/
    
      53    go build -o build/${pkgname%-git} ./cmd/gitee
    
      54}
    
      55
    
      56package() {
    
      57    cd "${srcdir}/${pkgname}"
    
      58
    
      59    install -vDm755 build/${pkgname%-git} -t ${pkgdir}/usr/bin/
    
      60    install -vDm0644 *.md -t "${pkgdir}/usr/share/doc/${pkgname}/"
    
      61    cp -R docs "${pkgdir}/usr/share/doc/${pkgname}/"
    
      62    install -vDm0644 "LICENSE" -t "${pkgdir}/usr/share/licenses/${pkgname}/"
    
      63}
    
      64

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-03 08:04:08	Low	2