gxde-clone-git

LOW

maintainer CharOfString 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package builds from a legitimate project Git repository, uses SKIP for checksums due to VCS nature, and performs standard build steps without executing untrusted remote code or installing prebuilt binaries.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a legitimate project Git repository, uses SKIP for checksums due to VCS nature, and performs standard build steps without executing untrusted remote code or installing prebuilt binaries.

PKGBUILD

      1# Maintainer: CharOfString <root@charofstring.cc>
    
      2
    
      3pkgname=gxde-clone-git
    
      4_pkgname=deepin-clone
    
      5pkgver=1.1.2.r0.g32e1b01
    
      6pkgrel=1
    
      7pkgdesc="Backup and restore tool for GXDE, a GXDE fork of deepin-clone heavily modified from Deepin's version"
    
      8arch=(x86_64 aarch64)
    
      9url='https://github.com/GXDE-OS/deepin-clone'
    
      10license=(GPL-3.0-or-later)
    
      11depends=(gxde-dtk2-git gxde-dtk5-git qt5-base partclone jfsutils ntfs-3g xfsprogs
    
      12         hicolor-icon-theme bash libstdc++ libgcc glibc)
    
      13makedepends=(git cmake ninja qt5-tools gxde-dtk2widget-dev-git deepin-gettext-tools)
    
      14provides=(deepin-clone)
    
      15conflicts=(deepin-clone)
    
      16source=("$_pkgname::git+$url.git")
    
      17sha256sums=('SKIP')
    
      18
    
      19pkgver() {
    
      20  cd "$_pkgname"
    
      21  git describe --long --tags --abbrev=7 | sed 's/\([^-]*-g[0-9a-f]*\)$/r\1/;s/-/./g'
    
      22}
    
      23
    
      24prepare() {
    
      25  local _tag
    
      26  _tag=$(git -C "$_pkgname" describe --tags --abbrev=0)
    
      27  msg2 "$_pkgname -> $_tag"
    
      28  git -C "$_pkgname" checkout -q --detach "refs/tags/$_tag"
    
      29}
    
      30
    
      31build() {
    
      32  local _ver
    
      33  _ver=$(git -C "$_pkgname" describe --tags --abbrev=0)
    
      34  cmake -S "$_pkgname" -B build -G Ninja \
    
      35    -DCMAKE_INSTALL_PREFIX=/usr \
    
      36    -DCMAKE_INSTALL_LIBDIR=lib \
    
      37    -DCMAKE_BUILD_TYPE=None \
    
      38    -DVERSION="$_ver" \
    
      39    -DAPP_VERSION="$_ver" \
    
      40    -DDISABLE_DFM_PLUGIN=YES
    
      41  cmake --build build
    
      42}
    
      43
    
      44package() {
    
      45  DESTDIR="$pkgdir" cmake --install build
    
      46  # Arch 的 /usr/sbin 是指向 /usr/bin 的软链接，polkit 策略里的 /usr/sbin 路径照样可用
    
      47  mv "$pkgdir"/usr/sbin/* "$pkgdir"/usr/bin/
    
      48  rmdir "$pkgdir"/usr/sbin
    
      49}
    
      50

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 00:18:51	Low	2
2026-10-11 00:26:05	Low	2
2026-10-10 06:13:18	Low	2