lumux-git

LOW

maintainer max.bra 0 votes scanned 2026-10-21 07:31:05.029830

View on AUR

Why flagged

Package builds from a forked Git repository with SKIPped checksum, but source is public and build uses standard Python tooling; no evidence of malicious activity.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): Package builds from a forked Git repository with SKIPped checksum, but source is public and build uses standard Python tooling; no evidence of malicious activity.

PKGBUILD

      1# Maintainer: Max <tua-email@example.com>
    
      2
    
      3pkgname=lumux-git
    
      4_pkgname=lumux
    
      5pkgver=0.6.2.r105.gd9e59fd
    
      6pkgrel=1
    
      7pkgdesc="Real-time ambient lighting sync for Philips Hue on Linux (Wayland), GTK4/libadwaita"
    
      8arch=('any')
    
      9url="https://github.com/enginkirmaci/lumux"
    
      10license=('MIT')
    
      11depends=(
    
      12  'python'
    
      13  'python-gobject'
    
      14  'gtk4'
    
      15  'libadwaita'
    
      16  'python-numpy'
    
      17  'python-pillow'
    
      18  'python-requests'
    
      19  'python-urllib3'
    
      20  'python-pydbus'
    
      21  'python-zeroconf'
    
      22  'xdg-desktop-portal'
    
      23  'pipewire'
    
      24  'gstreamer'
    
      25  'gst-plugins-base'
    
      26  'gst-plugin-pipewire'
    
      27  'openssl'
    
      28)
    
      29makedepends=(
    
      30  'git'
    
      31  'python-build'
    
      32  'python-installer'
    
      33  'python-setuptools'
    
      34  'python-wheel'
    
      35)
    
      36optdepends=(
    
      37  'xdg-desktop-portal-gnome: screen capture portal on GNOME'
    
      38  'xdg-desktop-portal-kde: screen capture portal on KDE Plasma'
    
      39  'xdg-desktop-portal-wlr: screen capture portal on wlroots compositors'
    
      40  'xdg-desktop-portal-hyprland: screen capture portal on Hyprland'
    
      41)
    
      42provides=("$_pkgname")
    
      43conflicts=("$_pkgname")
    
      44_fork="https://github.com/max72bra/lumux.git"
    
      45source=("$_pkgname::git+$_fork")
    
      46sha256sums=('SKIP')
    
      47
    
      48pkgver() {
    
      49  cd "$srcdir/$_pkgname"
    
      50  local _ver
    
      51  _ver=$(grep -m1 '^version' pyproject.toml | cut -d'"' -f2)
    
      52  printf "%s.r%s.g%s" "$_ver" \
    
      53    "$(git rev-list --count HEAD)" \
    
      54    "$(git rev-parse --short HEAD)"
    
      55}
    
      56
    
      57build() {
    
      58  cd "$srcdir/$_pkgname"
    
      59  python -m build --wheel --no-isolation
    
      60}
    
      61
    
      62package() {
    
      63  cd "$srcdir/$_pkgname"
    
      64  python -m installer --destdir="$pkgdir" dist/*.whl
    
      65  install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      66}
    
      67

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-21 07:31:05	Low	2