linyaps-box-rust-git

LOW

maintainer taotieren 0 votes scanned 2026-08-19 09:41:53.223783

View on AUR

Why flagged

The package builds from a public Git repository with a SKIP'd checksum, but it is a legitimate Rust project source; no untrusted prebuilt binaries or malicious payloads are involved, and the build process is standard for AUR packages.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a public Git repository with a SKIP'd checksum, but it is a legitimate Rust project source; no untrusted prebuilt binaries or malicious payloads are involved, and the build process is standard for AUR packages.

PKGBUILD

      1# Maintainer: taotieren <admin@taotieren.com>
    
      2
    
      3pkgname=linyaps-box-rust-git
    
      4pkgver=2.3.0.rust.1.r4.g7cbcb6c
    
      5pkgrel=1
    
      6pkgdesc="Linyaps OCI runtime implemented in Rust A command-compatible Rust implementation of the Linyaps OCI runtime"
    
      7arch=($CARCH)
    
      8url="https://github.com/guanzi008/linyaps-box-rust"
    
      9license=('LGPL-3.0-or-later')
    
      10provides=(${pkgname%-git} ${pkgname%-rust-git})
    
      11conflicts=(${pkgname%-git} ${pkgname%-rust-git})
    
      12replaces=()
    
      13depends=(
    
      14    libgcc_s.so
    
      15)
    
      16makedepends=(
    
      17    git
    
      18    rust
    
      19    pkgconf
    
      20)
    
      21optdepends=()
    
      22backup=()
    
      23options=(!lto !debug)
    
      24install=
    
      25source=("git+${url}.git")
    
      26sha256sums=('SKIP')
    
      27
    
      28pkgver() {
    
      29  cd "${srcdir}/${pkgname%-git}"
    
      30  (
    
      31    set -o pipefail
    
      32    git describe --long --tag --abbrev=7 2>/dev/null | sed 's/^v//g;s/\([^-]*-g\)/r\1/;s/-/./g' ||
    
      33      printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
    
      34  )
    
      35}
    
      36
    
      37prepare() {
    
      38    git -C "${srcdir}/${pkgname%-git}" clean -dfx
    
      39    cd "${srcdir}/${pkgname%-git}"
    
      40    export RUSTUP_TOOLCHAIN=stable
    
      41    cargo fetch --locked --target host-tuple
    
      42    cargo fetch --target "$CARCH-unknown-linux-gnu"
    
      43}
    
      44
    
      45build() {
    
      46    cd "${srcdir}/${pkgname%-git}/"
    
      47
    
      48    export RUSTUP_TOOLCHAIN=stable
    
      49    export CARGO_TARGET_DIR=target
    
      50    #     cargo build --release --all-features
    
      51    # CFLAGS+=" -ffat-lto-objects"
    
      52    cargo build \
    
      53        --offline \
    
      54        --locked \
    
      55        --release
    
      56}
    
      57
    
      58# check() {
    
      59#     cd "${srcdir}/${pkgname}/"
    
      60#
    
      61#     export RUSTUP_TOOLCHAIN=stable
    
      62#     cargo test --all-features
    
      63# }
    
      64
    
      65package() {
    
      66    cd "${srcdir}/${pkgname%-git}/"
    
      67
    
      68    export RUSTUP_TOOLCHAIN=stable
    
      69    #     cargo install --no-track --all-features --root "$pkgdir/usr/" --path .
    
      70    find target/release \
    
      71        -maxdepth 1 \
    
      72        -executable \
    
      73        -type f \
    
      74        -exec install -vDm0755 -t "$pkgdir/usr/bin/" {} +
    
      75    
    
      76    install -vDm0644 debian/*.1 -t ${pkgdir}/usr/share/man/man1/
    
      77    install -vDm0644 *.md -t "${pkgdir}/usr/share/doc/${pkgname}/"
    
      78    install -vDm0644 LICENSE -t "${pkgdir}/usr/share/licenses/${pkgname}/"
    
      79    cp -rv LICENSES "${pkgdir}/usr/share/licenses/${pkgname}/"
    
      80}
    
      81

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-19 09:41:53	Low	2