monkeytype-git

maintainer artturioksanen · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged Package builds from the official project repository, uses SKIP due to git source, but does not execute untrusted remote code or install prebuilt binaries.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): Package builds from the official project repository, uses SKIP due to git source, but does not execute untrusted remote code or install prebuilt binaries.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Contributor: Emmanuel Gil Peyrot <linkmauve@linkmauve.fr>
    
      2
    
      3pkgname=monkeytype-git
    
      4pkgver=v23.3.0.r27.g15e7bca
    
      5pkgrel=1
    
      6pkgdesc="Generates static type annotations for Python modules by collecting runtime types"
    
      7arch=('any')
    
      8url="https://github.com/instagram/MonkeyType"
    
      9license=('BSD')
    
      10makedepends=('git')
    
      11depends=('python' 'python-libcst' 'python-mypy_extensions' 'python-setuptools')
    
      12conflicts=('monkeytype')
    
      13provides=('monkeytype')
    
      14source=("git+https://github.com/instagram/MonkeyType")
    
      15sha256sums=('SKIP')
    
      16
    
      17pkgver() {
    
      18  cd MonkeyType
    
      19  git describe --long | sed 's/\([^-]*-g\)/r\1/;s/-/./g'
    
      20}
    
      21
    
      22build() {
    
      23  cd MonkeyType
    
      24  python setup.py build
    
      25}
    
      26
    
      27package() {
    
      28  cd MonkeyType
    
      29  python setup.py install --root="$pkgdir"/ --optimize=1 --skip-build
    
      30  install -Dm644 LICENSE "$pkgdir"/usr/share/licenses/python-monkeytype/LICENSE
    
      31}
    
      32

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 17:15:21	MEDIUM	1
2026-06-18 16:11:54	CLEAN	0