libvslvm-git

LOW

maintainer cookiecaper 0 votes scanned 2026-09-09 01:18:32.135718

View on AUR

Why flagged

The package builds from source using declared git repositories with SKIP'd checksums, but all sources are from the project's official GitHub organization and no untrusted executables or remote code execution occur.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from source using declared git repositories with SKIP'd checksums, but all sources are from the project's official GitHub organization and no untrusted executables or remote code execution occur.

PKGBUILD

      1# Maintainer: Jeff Cook <jeff@jeffcook.io>
    
      2
    
      3pkgname=libvslvm-git
    
      4_pkgname=libvslvm
    
      5pkgver=20260901.r0.g80bbcdd
    
      6pkgrel=1
    
      7pkgdesc="Library and tools to access Linux Logical Volume Manager (LVM) volumes"
    
      8arch=('x86_64')
    
      9url="https://github.com/libyal/libvslvm"
    
      10license=('LGPL-3.0-or-later')
    
      11depends=('fuse3' 'python')
    
      12makedepends=('autoconf' 'automake' 'gettext' 'git' 'libtool' 'pkgconf' 'python-setuptools')
    
      13provides=("libvslvm=${pkgver}")
    
      14conflicts=('libvslvm')
    
      15source=(
    
      16  'libvslvm::git+https://github.com/libyal/libvslvm.git'
    
      17  'libbfio::git+https://github.com/libyal/libbfio.git'
    
      18  'libcdata::git+https://github.com/libyal/libcdata.git'
    
      19  'libcerror::git+https://github.com/libyal/libcerror.git'
    
      20  'libcfile::git+https://github.com/libyal/libcfile.git'
    
      21  'libclocale::git+https://github.com/libyal/libclocale.git'
    
      22  'libcnotify::git+https://github.com/libyal/libcnotify.git'
    
      23  'libcpath::git+https://github.com/libyal/libcpath.git'
    
      24  'libcsplit::git+https://github.com/libyal/libcsplit.git'
    
      25  'libcthreads::git+https://github.com/libyal/libcthreads.git'
    
      26  'libfcache::git+https://github.com/libyal/libfcache.git'
    
      27  'libfdata::git+https://github.com/libyal/libfdata.git'
    
      28  'libfvalue::git+https://github.com/libyal/libfvalue.git'
    
      29  'libuna::git+https://github.com/libyal/libuna.git'
    
      30)
    
      31sha256sums=(
    
      32  'SKIP'
    
      33  'SKIP'
    
      34  'SKIP'
    
      35  'SKIP'
    
      36  'SKIP'
    
      37  'SKIP'
    
      38  'SKIP'
    
      39  'SKIP'
    
      40  'SKIP'
    
      41  'SKIP'
    
      42  'SKIP'
    
      43  'SKIP'
    
      44  'SKIP'
    
      45  'SKIP'
    
      46)
    
      47
    
      48pkgver() {
    
      49  cd "${_pkgname}"
    
      50  git describe --long --tags --always \
    
      51    | sed 's/^v//;s/\([^-]*-g\)/r\1/;s/-/./g'
    
      52}
    
      53
    
      54prepare() {
    
      55  cd "${_pkgname}"
    
      56
    
      57  # Upstream's sync script normally clones these during prepare(). Point it at
    
      58  # makepkg's declared sources so the build phase performs no network fetches.
    
      59  sed -i \
    
      60    -e "s|^GIT_URL_PREFIX=.*|GIT_URL_PREFIX=\"file://${srcdir}\";|" \
    
      61    -e 's|/${LOCAL_LIB}\.git|/${LOCAL_LIB}|' \
    
      62    synclibs.sh
    
      63
    
      64  ./synclibs.sh
    
      65  ./autogen.sh
    
      66}
    
      67
    
      68build() {
    
      69  cd "${_pkgname}"
    
      70  ./configure \
    
      71    --prefix=/usr \
    
      72    --enable-python \
    
      73    --enable-wide-character-type \
    
      74    --enable-libbfio \
    
      75  make
    
      76}
    
      77
    
      78check() {
    
      79  cd "${_pkgname}"
    
      80  make check
    
      81}
    
      82
    
      83package() {
    
      84  cd "${_pkgname}"
    
      85  make DESTDIR="${pkgdir}" install
    
      86
    
      87  # Neither libtool metadata nor a static Python extension is useful at runtime.
    
      88  find "${pkgdir}" -type f \( -name '*.la' -o -name '*.a' \) -delete
    
      89}
    
      90

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-09 01:18:32	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 23:18:28	Low	2