graft

LOW
maintainer lapsus 0 votes scanned 2026-08-22 13:17:31.911498
View on AUR
Why flagged

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

1# Maintainer: Yakov Till <yakov.till@gmail.com>
2pkgname=graft
3pkgver=0.10.1
4pkgrel=1
5pkgdesc="Open-source context layer for large codebases — turbocharge Claude Code, Cursor, Codex, Gemini & every coding agent"
6arch=('x86_64')
7url="https://github.com/NanoNets/Graft"
8license=('MIT')
9depends=('nodejs')
10makedepends=('npm')
11options=('!debug')
12source=("${pkgname}-${pkgver}.tgz::https://registry.npmjs.org/@nanonets/graft/-/graft-${pkgver}.tgz")
13noextract=("${pkgname}-${pkgver}.tgz")
14sha256sums=('960d9c2a7e2bfb3fc425a23fc320a025b0db48641f5b735776f58c82c92a138d')
15
16latestver() {
17 curl -fsSL 'https://registry.npmjs.org/@nanonets/graft/latest' | jq -r '.version'
18}
19
20build() {
21 npm install --cache "${srcdir}/npm-cache" \
22 --prefix="${srcdir}/staging" \
23 --global \
24 "${srcdir}/${pkgname}-${pkgver}.tgz"
25}
26
27package() {
28 local node_root="${pkgdir}/usr/lib/node_modules/@nanonets/graft"
29
30 install -dm755 "${pkgdir}/usr/lib/node_modules/@nanonets"
31 cp -a "${srcdir}/staging/lib/node_modules/@nanonets/graft" "${node_root}"
32
33 install -dm755 "${pkgdir}/usr/bin"
34 ln -s "/usr/lib/node_modules/@nanonets/graft/dist/cli.js" "${pkgdir}/usr/bin/graft"
35
36 # Clean npm metadata referencing $srcdir/$pkgdir
37 find "${pkgdir}" -name package.json -print0 | xargs -0 sed -i "/_where/d"
38
39 install -Dm644 "${node_root}/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
40}
41

Changes since previous scan

--- PKGBUILD @ 2026-08-13 01:25
+++ PKGBUILD @ 2026-08-22 13:17
@@ -1,6 +1,6 @@
# Maintainer: Yakov Till <yakov.till@gmail.com>
pkgname=graft
-pkgver=0.10.0
+pkgver=0.10.1
pkgrel=1
pkgdesc="Open-source context layer for large codebases — turbocharge Claude Code, Cursor, Codex, Gemini & every coding agent"
arch=('x86_64')
@@ -11,7 +11,7 @@
options=('!debug')
source=("${pkgname}-${pkgver}.tgz::https://registry.npmjs.org/@nanonets/graft/-/graft-${pkgver}.tgz")
noextract=("${pkgname}-${pkgver}.tgz")
-sha256sums=('c04817c84bf3d4192256a869d46b341585716d57b43a73bb6fe476e51f00f860')
+sha256sums=('960d9c2a7e2bfb3fc425a23fc320a025b0db48641f5b735776f58c82c92a138d')
latestver() {
curl -fsSL 'https://registry.npmjs.org/@nanonets/graft/latest' | jq -r '.version'

Scan history

Scanned at (UTC)SeverityRules
2026-08-22 13:17:31 Low 1
2026-08-14 00:03:41 Clean 2
2026-08-13 17:26:33 Low 1
2026-08-13 01:25:20 Low 1
2026-08-12 00:27:08 Clean 2
2026-08-11 21:21:47 Low 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion