groonga-normalizer-mysql
LOW
maintainer kou
0 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The flagged external install via gem is part of the test phase for a legitimate project, uses a local gem home, and does not execute untrusted code in the final package.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The flagged external install via gem is part of the test phase for a legitimate project, uses a local gem home, and does not execute untrusted code in the final package.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
External install via pipx/uv/poetry/cargo/go/gem
alt_pkg_manager_install
A non-pip/npm package manager (pipx, uv, poetry, cargo install, go install, gem, conda…) fetches and builds an external package at build time, outside source=() and makepkg's checksums.
-
PKGBUILD:52
MAKEFLAGS="-j$(nproc)" gem install --no-user-install grntest
PKGBUILD
1 offending line(s) highlighted
1
pkgname=groonga-normalizer-mysql
2
pkgver=1.3.0
3
pkgrel=1
4
pkgdesc="A MySQL compatible normalizer plugin for Groonga."
5
arch=('i686' 'x86_64' 'armv7h' 'aarch64')
6
url="https://github.com/groonga/groonga-normalizer-mysql"
7
license=('LGPL-2.0-only')
8
source=(
9
"https://github.com/groonga/groonga-normalizer-mysql/releases/download/v${pkgver}/${pkgname}-${pkgver}.tar.gz"
10
"https://github.com/groonga/groonga-normalizer-mysql/releases/download/v${pkgver}/${pkgname}-${pkgver}.tar.gz.asc"
11
)
12
sha512sums=(
13
"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e"
14
"SKIP"
15
)
16
validpgpkeys=(2701F317CFCCCB975CADE9C2624CF77434839225)
17
depends=(
18
gcc
19
groonga
20
)
21
makedepends=(
22
cmake
23
ninja
24
)
25
checkdepends=(
26
git
27
make
28
ruby-bundler
29
ruby-erb
30
)
31
32
# See also: https://wiki.archlinux.org/title/CMake_package_guidelines
33
build() {
34
rm -rf build
35
local cmake_options=(
36
-B build
37
-S "${pkgname}-${pkgver}"
38
-G Ninja
39
-W no-dev
40
-D CMAKE_BUILD_TYPE=None
41
-D CMAKE_INSTALL_PREFIX=/usr
42
-D CMAKE_SKIP_RPATH=ON
43
)
44
cmake "${cmake_options[@]}"
45
cmake --build build
46
}
47
48
check() {
49
cd build
50
export GEM_HOME="${PWD}/gem"
51
PATH="${GEM_HOME}/bin:${PATH}"
52
MAKEFLAGS="-j$(nproc)" gem install --no-user-install grntest
53
BUILD_DIR="${PWD}" \
54
"../${pkgname}-${pkgver}/test/run-test.sh" \
55
--n-retries=2 \
56
--read-timeout=30 \
57
--reporter=mark
58
}
59
60
package() {
61
DESTDIR="${pkgdir}" cmake --install build
62
}
63
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |