libcvec-git
The package builds from a git repository hosted on a personal domain, which is not whitelisted but plausibly the project's own source; the code is compiled locally and no untrusted prebuilt binaries are executed, making the risk low despite few votes and recent upload.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a git repository hosted on a personal domain, which is not whitelisted but plausibly the project's own source; the code is compiled locally and no untrusted prebuilt binaries are executed, making the risk low despite few votes and recent upload.
PKGBUILD
# Maintainer: Felipe BF <fprgw32 at gmail dot com>
_name=libcvec
pkgname="$_name"-git
pkgver=r5.c2dcb09
pkgrel=1
pkgdesc="Generic C++ vector library for C (bleeding edge)"
arch=('x86_64')
url="https://tvoygit.ru/vi_is_lonely/${_name}"
license=('MIT')
depends=('glibc')
makedepends=('git' 'clang')
conflicts=("${_name}")
source=(
"git+${url}#branch=main"
'makefile-paths.patch'
)
sha256sums=('SKIP'
'c33b56e20d4277d441b7438032b43601e671ab43be20597ec1fdeec8e439fb04')
pkgver() {
cd "$_name"
printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
}
prepare() {
cd "$srcdir/${_name}"
patch -p1 -F0 -i "$srcdir/makefile-paths.patch"
sed -i "s|\$(DESTDIR)|$pkgdir/|g; s|\$(libdir)|usr/lib|g; s|\$(includedir)|usr/include|g" Makefile
}
build() {
cd "$srcdir/${_name}"
make build
}
package() {
cd "$srcdir/${_name}"
make install
install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-06 06:11:22 | Low | 2 |