mcp-grafana

LOW

maintainer agony4001 0 votes scanned 2026-11-04 10:06:54.832549

View on AUR

Why flagged

The package builds from the project's official GitHub source, which is normal for AUR packages; the only concern is low due to few votes and recent upload, but the code is transparent and the usage stats disclosure is informative, not malicious.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from the project's official GitHub source, which is normal for AUR packages; the only concern is low due to few votes and recent upload, but the code is transparent and the usage stats disclosure is informative, not malicious.

PKGBUILD

      1# Maintainer: agony <27015 at riseup dot net>
    
      2
    
      3pkgname=mcp-grafana
    
      4pkgver=2.2.0
    
      5pkgrel=1
    
      6pkgdesc='MCP server for Grafana'
    
      7arch=('x86_64' 'aarch64')
    
      8url='https://github.com/grafana/mcp-grafana'
    
      9license=('Apache-2.0')
    
      10depends=('glibc')
    
      11makedepends=('go')
    
      12install=mcp-grafana.install
    
      13source=("${pkgname}-${pkgver}.tar.gz::${url}/archive/refs/tags/v${pkgver}.tar.gz")
    
      14sha256sums=('245cc4bb90ed3af887a7abe45118fcc83af810022f61069d737274638b2b262e')
    
      15
    
      16prepare() {
    
      17  cd "${pkgname}-${pkgver}"
    
      18  export GOPATH="${srcdir}/gopath"
    
      19  go mod download -x -modcacherw
    
      20}
    
      21
    
      22build() {
    
      23  cd "${pkgname}-${pkgver}"
    
      24  export GOPATH="${srcdir}/gopath"
    
      25  export CGO_CPPFLAGS="${CPPFLAGS}"
    
      26  export CGO_CFLAGS="${CFLAGS}"
    
      27  export CGO_CXXFLAGS="${CXXFLAGS}"
    
      28  export CGO_LDFLAGS="${LDFLAGS}"
    
      29  export GOFLAGS='-buildmode=pie -trimpath -buildvcs=false -mod=readonly -modcacherw'
    
      30  go build -v -ldflags="-linkmode=external -X github.com/grafana/mcp-grafana/v2.version=${pkgver}" -o mcp-grafana ./cmd/mcp-grafana
    
      31}
    
      32
    
      33check() {
    
      34  cd "${pkgname}-${pkgver}"
    
      35  export GOPATH="${srcdir}/gopath"
    
      36  export GOFLAGS='-buildvcs=false -mod=readonly -modcacherw'
    
      37  go test -tags unit ./...
    
      38}
    
      39
    
      40package() {
    
      41  cd "${pkgname}-${pkgver}"
    
      42  install -Dm755 mcp-grafana -t "${pkgdir}/usr/bin"
    
      43}
    
      44

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-04 10:06:54	Low	2