luadot

LOW

maintainer ItzTas 0 votes scanned 2026-08-21 01:13:51.509442

View on AUR

Why flagged

The package builds from a source tarball hosted on a project-specific GitLab instance, which is not whitelisted but plausibly project-owned; the build process is standard Rust/cargo workflow with locked dependencies, and no remote code execution or malicious behavior is present.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package builds from a source tarball hosted on a project-specific GitLab instance, which is not whitelisted but plausibly project-owned; the build process is standard Rust/cargo workflow with locked dependencies, and no remote code execution or malicious behavior is present.

PKGBUILD

      1# Maintainer: ItzTas <ts.aur@imts.aleeas.com>
    
      2
    
      3pkgname=luadot
    
      4pkgver=0.1.0
    
      5pkgrel=1
    
      6pkgdesc='A dotfiles manager configured in Lua'
    
      7arch=('x86_64' 'aarch64')
    
      8url='https://github.com/ItzTas/luadot'
    
      9license=('MIT')
    
      10depends=('gcc-libs' 'glibc')
    
      11makedepends=('cargo' 'cmake')
    
      12options=('!lto')
    
      13_registry='https://gitlab.digitalventura.com.br/api/v4/projects/luadot%2Fluadot/packages/generic/luadot'
    
      14_version=0.1.0
    
      15_srcdir="luadot-$pkgver"
    
      16source=("$pkgname-$pkgver.tar.gz::$_registry/$_version/luadot-$pkgver-src.tar.gz")
    
      17sha256sums=('0777c8ea25f2e333cf27593d811d80c1bdfcbcb43024f658f68f69054838f664')
    
      18
    
      19prepare() {
    
      20	cd "$_srcdir"
    
      21	export RUSTUP_TOOLCHAIN=stable
    
      22	cargo fetch --locked --target "$(rustc -vV | sed -n 's/^host: //p')"
    
      23}
    
      24
    
      25build() {
    
      26	cd "$_srcdir"
    
      27	export RUSTUP_TOOLCHAIN=stable
    
      28	export CARGO_TARGET_DIR=target
    
      29	cargo build --frozen --release
    
      30}
    
      31
    
      32package() {
    
      33	cd "$_srcdir"
    
      34	install -Dm0755 target/release/luadot "$pkgdir/usr/bin/luadot"
    
      35	install -Dm0644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      36	install -Dm0644 vendor/lpeg/LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE.lpeg"
    
      37
    
      38	install -d "$pkgdir/usr/share/bash-completion/completions"
    
      39	install -d "$pkgdir/usr/share/zsh/site-functions"
    
      40	install -d "$pkgdir/usr/share/fish/vendor_completions.d"
    
      41
    
      42	target/release/luadot completions bash >"$pkgdir/usr/share/bash-completion/completions/luadot"
    
      43	target/release/luadot completions zsh >"$pkgdir/usr/share/zsh/site-functions/_luadot"
    
      44	target/release/luadot completions fish >"$pkgdir/usr/share/fish/vendor_completions.d/luadot.fish"
    
      45}
    
      46

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-21 01:13:51	Low	2