hylo-git

LOW

maintainer damian101 0 votes scanned 2026-08-30 01:41:08.104345

View on AUR

Why flagged

The package builds from the project's own GitHub repository and a maintainer's fork for a submodule, which is normal for AUR Git packages; the low severity is due to unverifiable sources (SKIP'd checksums) and few votes, but it does not execute untrusted prebuilt binaries or exhibit malicious behavior.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from the project's own GitHub repository and a maintainer's fork for a submodule, which is normal for AUR Git packages; the low severity is due to unverifiable sources (SKIP'd checksums) and few votes, but it does not execute untrusted prebuilt binaries or exhibit malicious behavior.

PKGBUILD

      1# Maintainer: Damian Höster <damian.hoester@posteo.de>
    
      2
    
      3_pkgname=hylo
    
      4pkgname=$_pkgname-git
    
      5pkgver=0.1.0.r7166.b86ff706a
    
      6pkgrel=1
    
      7pkgdesc='Compiler for the Hylo programming language'
    
      8arch=(x86_64 aarch64)
    
      9url=https://hylo-lang.org
    
      10license=(Apache-2.0)
    
      11depends=(
    
      12  clang
    
      13  gcc-libs
    
      14  glibc
    
      15  swift-language
    
      16  zstd
    
      17)
    
      18makedepends=(
    
      19  git
    
      20  hylo-llvm-bin
    
      21  pkgconf
    
      22)
    
      23provides=($_pkgname)
    
      24conflicts=($_pkgname)
    
      25source=(
    
      26  "$_pkgname::git+https://github.com/hylo-lang/$_pkgname.git"
    
      27  "git+https://github.com/dabrahams/SPMBuildToolSupport.git"
    
      28)
    
      29sha256sums=(
    
      30  SKIP
    
      31  SKIP
    
      32)
    
      33
    
      34pkgver() {
    
      35  printf '0.1.0.r%s.%s' \
    
      36    "$(git -C $_pkgname rev-list --count HEAD)" \
    
      37    "$(git -C $_pkgname rev-parse --short HEAD)"
    
      38}
    
      39
    
      40prepare() {
    
      41  cd $_pkgname
    
      42  git config submodule.SPMBuildToolSupport.url "$srcdir/SPMBuildToolSupport"
    
      43  git -c protocol.file.allow=always submodule update SPMBuildToolSupport
    
      44  ./Tools/set-hc-version.sh "$pkgver"
    
      45}
    
      46
    
      47build() {
    
      48  cd $_pkgname
    
      49  swift build \
    
      50    --configuration release \
    
      51    --disable-sandbox \
    
      52    -Xswiftc -file-prefix-map -Xswiftc "$srcdir="
    
      53}
    
      54
    
      55check() {
    
      56  cd $_pkgname
    
      57  swift test \
    
      58    --configuration release \
    
      59    --disable-sandbox \
    
      60    --parallel
    
      61}
    
      62
    
      63package() {
    
      64  cd $_pkgname
    
      65
    
      66  local _bin_dir
    
      67  _bin_dir=$(swift build --configuration release --show-bin-path)
    
      68
    
      69  # Install private binaries and resources
    
      70  install -dm755 "$pkgdir"/usr/lib/$_pkgname
    
      71  install -Dm755 "$_bin_dir/hc" -t "$pkgdir"/usr/lib/$_pkgname
    
      72  install -Dm755 "$_bin_dir/hylo-demangle" -t "$pkgdir"/usr/lib/$_pkgname
    
      73
    
      74  # Copy resource bundles if generated
    
      75  for _bundle in "$_bin_dir"/*.resources; do
    
      76    [[ -e $_bundle ]] && cp -r "$_bundle" "$pkgdir"/usr/lib/$_pkgname
    
      77  done
    
      78
    
      79  install -dm755 "$pkgdir"/usr/bin
    
      80  ln -s /usr/lib/$_pkgname/hc "$pkgdir"/usr/bin/hc
    
      81  ln -s /usr/lib/$_pkgname/hc "$pkgdir"/usr/bin/hylo
    
      82  ln -s /usr/lib/$_pkgname/hylo-demangle "$pkgdir"/usr/bin/hylo-demangle
    
      83
    
      84  install -Dm644 README.md -t "$pkgdir"/usr/share/doc/$pkgname
    
      85  install -Dm644 LICENSE -t "$pkgdir"/usr/share/licenses/$pkgname
    
      86}
    
      87

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-30 01:41:08	Low	2