guile-lsp-server
The package builds from a public Git repository hosted on Codeberg, which is plausibly the project's official source; the only concerns are a skipped checksum and recent upload with few votes, but it does not execute untrusted remote code or install prebuilt binaries from ambiguous sources.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a public Git repository hosted on Codeberg, which is plausibly the project's official source; the only concerns are a skipped checksum and recent upload with few votes, but it does not execute untrusted remote code or install prebuilt binaries from ambiguous sources.
PKGBUILD
pkgname=guile-lsp-server
pkgver=0.4.10
pkgrel=1
pkgdesc="An LSP server for Scheme. (Guile implementation)"
arch=('any')
url="https://codeberg.org/rgherdt/scheme-lsp-server"
license=('MIT')
depends=('guile')
makedepends=('git' 'autoconf' 'automake' 'make')
provides=('guile-lsp-server')
conflicts=('guile-lsp-server-git')
source=("git+https://codeberg.org/rgherdt/scheme-lsp-server.git#tag=${pkgver}")
sha256sums=('SKIP')
build() {
cd "scheme-lsp-server/guile"
./scripts/install-deps.sh --prefix="${srcdir}/dep-install"
export GUILE_LOAD_PATH="${srcdir}/dep-install/share/guile/site/3.0:$GUILE_LOAD_PATH"
export GUILE_LOAD_COMPILED_PATH="${srcdir}/dep-install/lib/guile/3.0/site-ccache:$GUILE_LOAD_COMPILED_PATH"
autoreconf -ivf
./configure --prefix=/usr
make
}
package() {
cd "scheme-lsp-server/guile"
./scripts/install-deps.sh --prefix="${pkgdir}/usr"
make DESTDIR="${pkgdir}" install
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-27 03:16:18 | Low | 2 |