gxde-dict-git

LOW

maintainer CharOfString 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package builds from a legitimate project Git repository, uses SKIP only for the git source (which is common and expected), and performs no suspicious downloads or executions; the low severity is due to few votes and recent upload, not inherent risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a legitimate project Git repository, uses SKIP only for the git source (which is common and expected), and performs no suspicious downloads or executions; the low severity is due to few votes and recent upload, not inherent risk.

PKGBUILD

      1# Maintainer: CharOfString <root@charofstring.cc>
    
      2
    
      3pkgname=gxde-dict-git
    
      4_pkgname=gxde-dict
    
      5pkgver=1.0.2.r0.gb2ca46f
    
      6pkgrel=1
    
      7pkgdesc="Youdao dictionary for GXDE"
    
      8arch=(x86_64 aarch64)
    
      9url='https://github.com/GXDE-OS/gxde-dict'
    
      10license=(GPL-3.0-or-later)
    
      11depends=(gxde-dtk2-qt6-git gxde-dtk6-git qt6-base qt6-svg qt6-multimedia libx11 libxtst
    
      12         hicolor-icon-theme libstdc++ libgcc glibc)
    
      13makedepends=(git cmake ninja qt6-tools)
    
      14provides=(gxde-dict)
    
      15conflicts=(gxde-dict)
    
      16source=("$_pkgname::git+$url.git")
    
      17sha256sums=('SKIP')
    
      18
    
      19pkgver() {
    
      20  cd "$_pkgname"
    
      21  git describe --long --tags --abbrev=7 | sed 's/\([^-]*-g[0-9a-f]*\)$/r\1/;s/-/./g'
    
      22}
    
      23
    
      24prepare() {
    
      25  local _tag
    
      26  _tag=$(git -C "$_pkgname" describe --tags --abbrev=0)
    
      27  msg2 "$_pkgname -> $_tag"
    
      28  git -C "$_pkgname" checkout -q --detach "refs/tags/$_tag"
    
      29}
    
      30
    
      31build() {
    
      32  local _ver
    
      33  _ver=$(git -C "$_pkgname" describe --tags --abbrev=0)
    
      34  cmake -S "$_pkgname" -B build -G Ninja \
    
      35    -DCMAKE_INSTALL_PREFIX=/usr \
    
      36    -DCMAKE_INSTALL_LIBDIR=lib \
    
      37    -DCMAKE_BUILD_TYPE=None \
    
      38    -DVERSION="$_ver"
    
      39  cmake --build build
    
      40}
    
      41
    
      42package() {
    
      43  DESTDIR="$pkgdir" cmake --install build
    
      44}
    
      45

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 00:18:51	Low	2
2026-10-11 00:26:05	Low	2
2026-10-10 06:13:18	Low	2