mechrevo-drivers-dkms-git

LOW

maintainer lightjunction 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package builds drivers from a public Git repository with a SKIP'd checksum, but it is a legitimate DKMS package sourcing from a known developer's GitHub; the risk is low as it does not execute untrusted binaries or exfiltrate data.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds drivers from a public Git repository with a SKIP'd checksum, but it is a legitimate DKMS package sourcing from a known developer's GitHub; the risk is low as it does not execute untrusted binaries or exfiltrate data.

PKGBUILD

      1# Maintainer: LIghtJUNction <lightjunction.me@gmail.com>
    
      2
    
      3_pkgname=mechrevo-drivers
    
      4pkgname=mechrevo-drivers-dkms-git
    
      5pkgver=4.24.0.r30.g85bf136
    
      6pkgrel=1
    
      7pkgdesc='Unofficial MECHREVO laptop platform drivers based on TUXEDO drivers (DKMS, git)'
    
      8arch=('x86_64')
    
      9url='https://github.com/LIghtJUNction/mechrevo-drivers'
    
      10license=('GPL-2.0-or-later')
    
      11depends=('dkms')
    
      12makedepends=('git')
    
      13optdepends=('linux-headers: build modules for the Arch Linux kernel'
    
      14            'linux-lts-headers: build modules for the LTS kernel'
    
      15            'linux-zen-headers: build modules for the Zen kernel'
    
      16            'linux-hardened-headers: build modules for the hardened kernel'
    
      17            'udev-hid-bpf: keyboard fixes for TUXEDO Sirius 16 Gen1/2')
    
      18provides=("mechrevo-drivers-dkms=$pkgver"
    
      19          "tuxedo-drivers-dkms=$pkgver"
    
      20          'tuxedo-keyboard'
    
      21          'tuxedo-keyboard-ite'
    
      22          'tuxedo-io'
    
      23          'clevo-wmi'
    
      24          'clevo-acpi'
    
      25          'uniwill-wmi'
    
      26          'ite_8291'
    
      27          'ite_8291_lb'
    
      28          'ite_8297'
    
      29          'ite_829x')
    
      30# These packages install the same module names and/or userspace rules.
    
      31# Do not use replaces: the non-git MECHREVO package has another maintainer.
    
      32conflicts=('mechrevo-drivers-dkms'
    
      33           'tuxedo-drivers'
    
      34           'tuxedo-drivers-git'
    
      35           'tuxedo-drivers-dkms'
    
      36           'tuxedo-drivers-dkms-git'
    
      37           'tuxedo-keyboard-dkms'
    
      38           'tuxedo-keyboard-dkms-git'
    
      39           'tuxedo-keyboard-ite-dkms'
    
      40           'tuxedo-keyboard-ite-dkms-git')
    
      41options=('!strip' '!debug' '!lto')
    
      42source=("${_pkgname}::git+${url}.git#branch=main"
    
      43        'dkms.conf')
    
      44sha256sums=('SKIP'
    
      45            '1e04086ef9bb94ec15878464b6594f7507715c081c4c114e56b7d46731fd7ea6')
    
      46
    
      47pkgver() {
    
      48    cd "${srcdir}/${_pkgname}" || return 1
    
      49    local tag
    
      50    # Only final vX.Y.Z tags are version bases, never upstream RC tags.
    
      51    tag=$(git tag --merged HEAD --list 'v[0-9]*' | grep -E '^v[0-9]+\.[0-9]+\.[0-9]+$' | sort -V | tail -n1)
    
      52    if [[ -n $tag ]]; then
    
      53        git describe --tags --long --match "$tag" | sed 's/^v//;s/-\([0-9]\+\)-g/.r\1.g/'
    
      54    else
    
      55        printf 'r%s.g%s' "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
    
      56    fi
    
      57}
    
      58
    
      59package() {
    
      60    local dkmsdir="${pkgdir}/usr/src/${_pkgname}-${pkgver}"
    
      61    local doc
    
      62    install -dm755 "$dkmsdir"
    
      63    cp -a "${srcdir}/${_pkgname}/src/." "$dkmsdir/"
    
      64    install -m644 "${srcdir}/dkms.conf" "$dkmsdir/dkms.conf"
    
      65    sed -i "s/@PKGVER@/${pkgver}/g" "$dkmsdir/dkms.conf"
    
      66
    
      67    install -Dm644 "${srcdir}/${_pkgname}"/files/usr/lib/modprobe.d/*.conf \
    
      68        -t "${pkgdir}/usr/lib/modprobe.d/"
    
      69    install -Dm644 "${srcdir}/${_pkgname}"/files/usr/lib/udev/rules.d/*.rules \
    
      70        -t "${pkgdir}/usr/lib/udev/rules.d/"
    
      71    install -Dm644 "${srcdir}/${_pkgname}"/files/usr/lib/udev/hwdb.d/*.hwdb \
    
      72        -t "${pkgdir}/usr/lib/udev/hwdb.d/"
    
      73
    
      74    install -Dm644 "${srcdir}/${_pkgname}/LICENSE" \
    
      75        "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      76    install -Dm644 "${srcdir}/${_pkgname}/README.md" \
    
      77        "${pkgdir}/usr/share/doc/${pkgname}/README.md"
    
      78    while IFS= read -r -d '' doc; do
    
      79        install -Dm644 "$doc" \
    
      80            "${pkgdir}/usr/share/doc/${pkgname}/docs/${doc#"${srcdir}/${_pkgname}/docs/"}"
    
      81    done < <(find "${srcdir}/${_pkgname}/docs" -type f -name '*.md' -print0)
    
      82}
    
      83

Changes since previous scan

--- PKGBUILD @ 2026-10-14 21:20
+++ PKGBUILD @ 2026-10-17 00:21
@@ -2,7 +2,7 @@
 
 _pkgname=mechrevo-drivers
 pkgname=mechrevo-drivers-dkms-git
-pkgver=4.24.0.r10.gc79a268
+pkgver=4.24.0.r30.g85bf136
 pkgrel=1
 pkgdesc='Unofficial MECHREVO laptop platform drivers based on TUXEDO drivers (DKMS, git)'
 arch=('x86_64')

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 23:21:11	Low	2
2026-10-14 21:20:28	Low	1
2026-10-14 19:20:25	Low	1
2026-10-14 17:20:19	Low	2
2026-10-14 11:19:54	Low	2