gxde-filetransfer-git

LOW
maintainer CharOfString 0 votes scanned 2026-10-17 00:21:55.226236
View on AUR
Why flagged

The package builds from a legitimate project Git repository with a SKIP'd checksum, but the source is the project's own code and not an executable payload, making the risk low despite limited votes and recent upload.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a legitimate project Git repository with a SKIP'd checksum, but the source is the project's own code and not an executable payload, making the risk low despite limited votes and recent upload.

PKGBUILD

1# Maintainer: CharOfString <root@charofstring.cc>
2
3pkgname=gxde-filetransfer-git
4_pkgname=gxde-filetransfer
5pkgver=1.2.1.r0.g65a30bd
6pkgrel=1
7pkgdesc='GXDE file transfer client'
8arch=(x86_64 aarch64)
9url='https://github.com/GXDE-OS/gxde-filetransfer'
10license=(GPL-3.0-or-later)
11depends=(gxde-dtk2-qt6-git gxde-dtk6-git qt6-base curl hicolor-icon-theme
12 libstdc++ libgcc glibc)
13makedepends=(git)
14provides=(gxde-filetransfer)
15conflicts=(gxde-filetransfer)
16source=("$_pkgname::git+$url.git")
17sha256sums=('SKIP')
18
19pkgver() {
20 cd "$_pkgname"
21 git describe --long --tags --abbrev=7 | sed 's/\([^-]*-g[0-9a-f]*\)$/r\1/;s/-/./g'
22}
23
24prepare() {
25 local _tag
26 _tag=$(git -C "$_pkgname" describe --tags --abbrev=0)
27 msg2 "$_pkgname -> $_tag"
28 git -C "$_pkgname" checkout -q --detach "refs/tags/$_tag"
29}
30
31build() {
32 cd "$_pkgname"
33 qmake6 PREFIX=/usr CONFIG+=no_qt_rpath \
34 QMAKE_CFLAGS_RELEASE="$CFLAGS" QMAKE_CXXFLAGS_RELEASE="$CXXFLAGS" \
35 QMAKE_LFLAGS_RELEASE="$LDFLAGS"
36 make
37}
38
39package() {
40 cd "$_pkgname"
41 make INSTALL_ROOT="$pkgdir" install
42}
43

Scan history

Scanned at (UTC)SeverityRules
2026-10-17 00:21:55 Low 2
2026-10-16 00:12:47 Low 2
2026-10-15 00:28:05 Low 2
2026-10-14 00:06:47 Low 2
2026-10-13 00:23:45 Low 2
2026-10-12 00:18:51 Low 2
2026-10-11 00:26:05 Low 2
2026-10-10 06:13:18 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion