isocast-git

LOW

maintainer alerque 0 votes scanned 2026-10-22 09:34:24.719450

View on AUR

Why flagged

The package builds from a public Git repository with a SKIP'd checksum, but it is a legitimate Rust project using standard cargo build practices; the source is not obfuscated or malicious, and the risk is limited to potential supply-chain issues from unverified code.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a public Git repository with a SKIP'd checksum, but it is a legitimate Rust project using standard cargo build practices; the source is not obfuscated or malicious, and the risk is limited to potential supply-chain issues from unverified code.

PKGBUILD

      1# Maintainer: Caleb Maclennan <caleb@alerque.com>
    
      2
    
      3pkgname=isocast-git
    
      4_pkgname=${pkgname%-git}
    
      5pkgver=0.0.8.r1.g74a13d2
    
      6pkgrel=1
    
      7url="https://$_pkgname.xyz"
    
      8_url="https://github.com/R44VC0RP/$_pkgname"
    
      9pkgdesc='OBS alternative that records every source as its own file (Git HEAD'
    
      10arch=(x86_64)
    
      11license=(MIT Apache-2.0)
    
      12depends=(alsa-lib
    
      13         fontconfig
    
      14         glibc # libc.so libm.so
    
      15         libgcc)
    
      16makedepends=(cargo
    
      17             git)
    
      18provides=("$_pkgname=$pkgver")
    
      19conflicts=("$_pkgname")
    
      20source=("git+$_url.git")
    
      21sha256sums=('SKIP')
    
      22
    
      23_srcenv() {
    
      24	cd "$_pkgname"
    
      25	export CARGO_HOME="$srcdir"
    
      26	export CARGO_PROFILE_RELEASE_DEBUG=2
    
      27	export CARGO_PROFILE_RELEASE_STRIP=false
    
      28	export CARGO_PROFILE_RELEASE_LTO=thin
    
      29	export CARGO_PROFILE_RELEASE_CODEGEN_UNITS=1
    
      30	export CARGO_PROFILE_RELEASE_OPT_LEVEL=3
    
      31	export CARGO_TARGET_DIR=target
    
      32	export RUSTUP_TOOLCHAIN=stable
    
      33	CFLAGS+=' -fno-lto'
    
      34}
    
      35
    
      36prepare() {
    
      37	_srcenv
    
      38	cargo fetch --locked --target host-tuple
    
      39}
    
      40
    
      41pkgver() {
    
      42	cd "$_pkgname"
    
      43	git describe --long --tags --abbrev=7 --match="v*" HEAD |
    
      44			sed 's/^v//;s/\([^-]*-g\)/r\1/;s/-/./g'
    
      45}
    
      46
    
      47build() {
    
      48	_srcenv
    
      49	cargo build --frozen --release
    
      50}
    
      51
    
      52package() {
    
      53	depends+=(libasound.so
    
      54	          libgcc_s.so)
    
      55	cd "$_pkgname"
    
      56	install -Dm0755 -t "$pkgdir/usr/bin/" "target/release/$_pkgname"{,-ui}
    
      57	install -Dm0644 -t "$pkgdir/usr/share/licenses/$pkgname/" LICENSE-{APACHE,MIT}
    
      58}
    
      59

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-22 09:34:24	Low	2