libddcci-git
LOW
maintainer TheElevatedOne
0 votes
scanned 2026-09-22 17:38:46.328100
Why flagged
The package builds from a public Git repository with a SKIP'd checksum, but it is the project's own source code, not a prebuilt binary, and the worst case is limited to supply-chain risks from the source host.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a public Git repository with a SKIP'd checksum, but it is the project's own source code, not a prebuilt binary, and the worst case is limited to supply-chain risks from the source host.
PKGBUILD
1
# Maintainer: TheElevatedOne <adam.mlady@elevated.ovh>
2
3
_pkgname=libddcci
4
pkgname=libddcci-git
5
pkgver=0.2.0.r1.g0a31d17
6
pkgrel=1
7
pkgdesc='DDC/CI (VESA MCCS) C Library'
8
arch=('x86_64')
9
url='https://github.com/TheElevatedOne/libddcci'
10
license=('MIT')
11
depends=('glibc')
12
makedepends=('git' 'linux-api-headers')
13
optdepends=('i2c-tools')
14
provides=("${_pkgname}")
15
conflicts=("$_pkgname")
16
source=("git+https://github.com/TheElevatedOne/libddcci.git")
17
sha256sums=('SKIP')
18
19
pkgver() {
20
cd "$srcdir/$_pkgname"
21
(
22
set -o pipefail
23
git describe --long --tags --abbrev=7 2>/dev/null |
24
sed 's/^v//;s/\([^-]*-g\)/r\1/;s/-/./g' ||
25
printf 'r%s.%s' "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
26
)
27
}
28
29
build() {
30
cd "$srcdir/$_pkgname"
31
make PREFIX=/usr
32
}
33
34
check() {
35
cd "$srcdir/$_pkgname"
36
make PREFIX=/usr check
37
}
38
39
package() {
40
cd "$srcdir/$_pkgname"
41
make PREFIX=/usr DESTDIR="$pkgdir" install
42
install -Dm644 LICENSE -t "${pkgdir}/usr/share/licenses/${pkgname}/"
43
}
44
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-22 17:38:46 | Low | 2 |