moarchy-keep
LOW
maintainer simonschubert
0 votes
scanned 2026-09-12 19:12:35.548512
Why flagged
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
PKGBUILD
1
# Maintainer: Simon Schubert <simon@librem.one>
2
pkgname=moarchy-keep
3
pkgver=0.1.1
4
pkgrel=1
5
pkgdesc="Text notes and checklists for a Linux phone, kept on the device"
6
arch=('any')
7
url="https://github.com/SimonSchubert/moarchy-apps"
8
license=('MIT')
9
# Pure Python, so arch=any. The GUI stack is all runtime, nothing is compiled.
10
depends=('python' 'python-gobject' 'gtk4' 'libadwaita')
11
source=("$url/releases/download/keep-v$pkgver/$pkgname-$pkgver.tar.gz")
12
sha256sums=('9786ab25aca6980ea68efd7578af1ae8aed7b5fecac76b5c99a674e8a8c5eebd')
13
14
# The source tarball is assembled by packaging/release.sh from two subtrees of
15
# one tag -- apps/keep and shared -- so it holds this app and the shared code it
16
# uses and nothing else. That is what lets a monorepo keep per-app versions:
17
# `git archive <tag>:<subdir>` means one repo does not mean one version number.
18
#
19
# Deliberately a versioned package rather than a -git one. mobileomarchy pins
20
# each AUR package by the AUR repo's commit; for a VCS package that pin governs
21
# the packaging and says nothing about the code makepkg then clones at HEAD, so
22
# "pinned in manifest.toml" would read as reproducible without being it. A
23
# tarball with a checksum makes the pin name the exact code, and gives pacman a
24
# version it can actually compare for upgrades.
25
#
26
# The source is a release asset built with `git archive`, not GitHub's
27
# auto-generated archive: those are produced on demand, and a change to the
28
# compression GitHub uses has broken every checksum pinned against them before.
29
# An uploaded file is stored verbatim and its checksum cannot move under us.
30
31
check() {
32
cd "$srcdir/$pkgname-$pkgver"
33
# The storage layer only. The widget tests skip themselves without a display,
34
# which a build chroot does not have; scripts/check.sh runs those.
35
PYTHONPATH=. python3 -m unittest discover -s tests
36
}
37
38
package() {
39
cd "$srcdir/$pkgname-$pkgver"
40
41
# Deliberately NOT site-packages. That path is Python-version-specific
42
# (/usr/lib/python3.13/site-packages), and this is an arch=any package: the
43
# version that built it would be baked in, so a Python minor bump would break
44
# every installed copy until rebuilt. A private dir on sys.path is immune.
45
install -Dm644 moarchy_keep/*.py -t "$pkgdir/usr/lib/$pkgname/moarchy_keep/"
46
47
# The shared code is vendored into this package rather than being a package
48
# of its own. The store reports what an app costs in packages and megabytes
49
# onto a stock image, and a second package for two hundred lines of palette
50
# arithmetic is a cost with nothing behind it. One source copy in the repo,
51
# one self-contained package here, no runtime coupling between apps.
52
install -Dm644 moarchy_ui/*.py -t "$pkgdir/usr/lib/$pkgname/moarchy_ui/"
53
54
install -Dm755 launcher "$pkgdir/usr/bin/moarchy-keep"
55
56
install -Dm644 data/org.moarchy.Keep.desktop \
57
"$pkgdir/usr/share/applications/org.moarchy.Keep.desktop"
58
install -Dm644 data/org.moarchy.Keep.svg \
59
"$pkgdir/usr/share/icons/hicolor/scalable/apps/org.moarchy.Keep.svg"
60
61
install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
62
install -Dm644 README.md "$pkgdir/usr/share/doc/$pkgname/README.md"
63
}
64
Changes since previous scan
--- PKGBUILD @ 2026-09-07 00:30+++ PKGBUILD @ 2026-09-12 19:12@@ -1,16 +1,21 @@ # Maintainer: Simon Schubert <simon@librem.one> pkgname=moarchy-keep-pkgver=0.1.0+pkgver=0.1.1 pkgrel=1 pkgdesc="Text notes and checklists for a Linux phone, kept on the device" arch=('any')-url="https://github.com/SimonSchubert/moarchy-keep"+url="https://github.com/SimonSchubert/moarchy-apps" license=('MIT') # Pure Python, so arch=any. The GUI stack is all runtime, nothing is compiled. depends=('python' 'python-gobject' 'gtk4' 'libadwaita')-source=("$url/releases/download/v$pkgver/$pkgname-$pkgver.tar.gz")-sha256sums=('961d79c98d73d1073e28bab799aee3bc704cc59009adb999c668b48a33da7568')+source=("$url/releases/download/keep-v$pkgver/$pkgname-$pkgver.tar.gz")+sha256sums=('9786ab25aca6980ea68efd7578af1ae8aed7b5fecac76b5c99a674e8a8c5eebd') +# The source tarball is assembled by packaging/release.sh from two subtrees of+# one tag -- apps/keep and shared -- so it holds this app and the shared code it+# uses and nothing else. That is what lets a monorepo keep per-app versions:+# `git archive <tag>:<subdir>` means one repo does not mean one version number.+# # Deliberately a versioned package rather than a -git one. mobileomarchy pins # each AUR package by the AUR repo's commit; for a VCS package that pin governs # the packaging and says nothing about the code makepkg then clones at HEAD, so@@ -27,7 +32,7 @@ cd "$srcdir/$pkgname-$pkgver" # The storage layer only. The widget tests skip themselves without a display, # which a build chroot does not have; scripts/check.sh runs those.- python3 -m unittest discover -s tests+ PYTHONPATH=. python3 -m unittest discover -s tests } package() {@@ -39,7 +44,14 @@ # every installed copy until rebuilt. A private dir on sys.path is immune. install -Dm644 moarchy_keep/*.py -t "$pkgdir/usr/lib/$pkgname/moarchy_keep/" - install -Dm755 bin/moarchy-keep "$pkgdir/usr/bin/moarchy-keep"+ # The shared code is vendored into this package rather than being a package+ # of its own. The store reports what an app costs in packages and megabytes+ # onto a stock image, and a second package for two hundred lines of palette+ # arithmetic is a cost with nothing behind it. One source copy in the repo,+ # one self-contained package here, no runtime coupling between apps.+ install -Dm644 moarchy_ui/*.py -t "$pkgdir/usr/lib/$pkgname/moarchy_ui/"++ install -Dm755 launcher "$pkgdir/usr/bin/moarchy-keep" install -Dm644 data/org.moarchy.Keep.desktop \ "$pkgdir/usr/share/applications/org.moarchy.Keep.desktop"Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-12 19:12:35 | Low | 1 |
| 2026-09-07 00:30:15 | Clean | 2 |
| 2026-09-06 23:12:41 | Low | 1 |