hledger-simplefin-git

LOW

maintainer eleanor 0 votes scanned 2026-10-28 00:06:54.512692

View on AUR

Why flagged

The package builds from a public Git repository with a SKIP'd checksum, but installs only small, readable shell scripts; the low vote count and recent upload are minor concerns, but the source is transparent and the risk is limited to script behavior, not hidden payloads.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a public Git repository with a SKIP'd checksum, but installs only small, readable shell scripts; the low vote count and recent upload are minor concerns, but the source is transparent and the risk is limited to script behavior, not hidden payloads.

PKGBUILD

      1# Maintainer: Eleanor Kelley <me at eleanorkelley dot com>
    
      2
    
      3_pkgname=hledger-simplefin
    
      4pkgname=$_pkgname-git
    
      5pkgver=r11.ea8ec42
    
      6pkgrel=1
    
      7pkgdesc="SimpleFIN helper scripts for hledger"
    
      8arch=(any)
    
      9url="https://github.com/eleanor-k/hledger-simplefin"
    
      10license=('GPL-3.0-or-later')
    
      11depends=(
    
      12    'bash'
    
      13    'coreutils'
    
      14    'curl'
    
      15    'jq'
    
      16    'libsecret'
    
      17    'python3'
    
      18)
    
      19makedepends=('git')
    
      20provides=("$_pkgname")
    
      21conflicts=("$_pkgname")
    
      22source=("$_pkgname::git+https://github.com/eleanor-k/hledger-simplefin.git")
    
      23b2sums=('SKIP')
    
      24pkgver() {
    
      25    cd $_pkgname
    
      26    printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
    
      27}
    
      28package() {
    
      29    install -Dm755 $_pkgname/simplefincsv "$pkgdir"/usr/bin/simplefincsv
    
      30    install -Dm755 $_pkgname/simplefinjson "$pkgdir"/usr/bin/simplefinjson
    
      31    install -Dm755 $_pkgname/simplefinsetup "$pkgdir"/usr/bin/simplefinsetup
    
      32}
    
      33
    
      34

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-28 00:06:54	Low	2
2026-10-27 23:48:54	Low	2