gsp-alpm-git

LOW

maintainer ogarcia 0 votes scanned 2026-10-07 14:05:47.471701

View on AUR

Why flagged

The package builds from a publicly accessible Git repository owned by the maintainer, which is normal for AUR packages; the only concerns are low-risk due to skipped checksum and recent upload with few votes, but it does not execute untrusted binaries or remote code.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a publicly accessible Git repository owned by the maintainer, which is normal for AUR packages; the only concerns are low-risk due to skipped checksum and recent upload with few votes, but it does not execute untrusted binaries or remote code.

PKGBUILD

      1# Maintainer: "Amhairghin" Oscar Garcia Amor (https://ogarcia.me)
    
      2
    
      3pkgname=gsp-alpm-git
    
      4pkgver=0.2.0.r17.g424bd72
    
      5pkgrel=1
    
      6pkgdesc='GNOME Software plugin for the packages of Arch Linux, through alpm-dbus'
    
      7arch=('x86_64')
    
      8url='https://gitlab.archlinux.org/ogarcia/gsp-alpm'
    
      9license=('GPL-2.0-or-later')
    
      10depends=('alpm-dbus' 'archlinux-appstream-data' 'glib2' 'glibc' 'gnome-software' 'libarchive' 'pacman' 'libalpm.so')
    
      11makedepends=('git' 'meson')
    
      12provides=('gsp-alpm')
    
      13conflicts=('gsp-alpm')
    
      14source=('gsp-alpm::git+https://gitlab.archlinux.org/ogarcia/gsp-alpm.git')
    
      15sha256sums=('SKIP')
    
      16
    
      17pkgver() {
    
      18  cd gsp-alpm
    
      19  printf '%s.r%s.%s' "$(git describe --tags --abbrev=0 2>/dev/null || echo 0)" "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
    
      20}
    
      21
    
      22build() {
    
      23  arch-meson gsp-alpm build
    
      24  meson compile -C build
    
      25}
    
      26
    
      27check() {
    
      28  meson test -C build --print-errorlogs
    
      29}
    
      30
    
      31package() {
    
      32  meson install -C build --destdir "$pkgdir"
    
      33  install -Dm0644 -t "$pkgdir/usr/share/doc/$pkgname" gsp-alpm/README.md
    
      34}
    
      35

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-07 14:05:47	Low	2