libdeltachat-git

LOW

maintainer jose1711 1 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package builds from the official project Git repository, which is a normal AUR practice; the recent orphan/re-adopt event is a metadata flag with no inherent security risk.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from the official project Git repository, which is a normal AUR practice; the recent orphan/re-adopt event is a metadata flag with no inherent security risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: Fabio 'Lolix' Loli <fabio.loli@disroot.org> -> https://github.com/FabioLolix
    
      2# Contributor: Giuseppe Calà <gcala at mailbox dot org>
    
      3
    
      4pkgname=libdeltachat-git
    
      5pkgver=1.147.1.r10.g4efd0d1
    
      6pkgrel=2
    
      7pkgdesc="Deltachat-core written in Rust"
    
      8arch=(x86_64 aarch64)
    
      9url="https://github.com/deltachat/deltachat-core-rust/"
    
      10license=(MPL-2.0)
    
      11#depends=(sqlcipher)
    
      12makedepends=(cargo cmake git)
    
      13provides=(libdeltachat)
    
      14conflicts=(libdeltachat)
    
      15options=(!lto)
    
      16source=("git+https://github.com/deltachat/deltachat-core-rust.git")
    
      17sha256sums=('SKIP')
    
      18
    
      19pkgver() {
    
      20  cd "deltachat-core-rust"
    
      21  git describe --long --tags --abbrev=7 | sed 's/^v//;s/\([^-]*-g\)/r\1/;s/-/./g'
    
      22}
    
      23
    
      24build() {
    
      25  cmake -B build -S "deltachat-core-rust" -Wno-dev \
    
      26    -DCMAKE_BUILD_TYPE=None \
    
      27    -DCMAKE_INSTALL_PREFIX=/usr
    
      28
    
      29  cmake --build build
    
      30}
    
      31
    
      32package() {
    
      33  DESTDIR="${pkgdir}" cmake --install build
    
      34}
    
      35

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 00:18:51	Low	2
2026-10-11 00:26:05	Low	2
2026-10-11 00:16:25	Medium	1
2026-06-18 16:11:54	Clean	0