moss-language

LOW

maintainer bingusfan 0 votes scanned 2026-10-19 00:03:55.276608

View on AUR

Why flagged

Package builds from a public, versioned source archive hosted on the maintainer's GitLab; the low severity is due to few votes and recent upload, but the source is verifiable and builds a Python wheel from declared project files without executing untrusted remote code.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): Package builds from a public, versioned source archive hosted on the maintainer's GitLab; the low severity is due to few votes and recent upload, but the source is verifiable and builds a Python wheel from declared project files without executing untrusted remote code.

PKGBUILD

      1# Maintainer: Bingusfan360 <bingusfan360@proton.me>
    
      2#
    
      3# MOSS language (compiler + runtime + adaptation system) for Arch.
    
      4# Companion package to the `moss` application package: this one installs the
    
      5# `moss-lang` console script and the `compiler`/`runtime` import packages
    
      6# plus runnable `.moss` examples under /usr/share/moss-language/examples.
    
      7# The bare `moss` command belongs to the application (BIN-949/BIN-950).
    
      8#
    
      9# BIN-1711: AUR publication was approved by the board (approval
    
      10# 5f810f99-4954-4611-bc68-cfcbd55c0a54). sha256sums is the real hash of the
    
      11# public v0.3.1 archive. license=unknown until the maintainer declares one
    
      12# (the repo currently has no LICENSE file / SPDX in pyproject).
    
      13pkgname=moss-language
    
      14pkgver=0.3.1
    
      15pkgrel=1
    
      16pkgdesc="The MOSS language: compiler, runtime, and adaptation system (standard-library-only). Companion to the moss application."
    
      17arch=('any')
    
      18url="https://gitlab.com/Bingusfan360/mahoraga-language"
    
      19license=('unknown')
    
      20depends=('python')
    
      21makedepends=('python-build' 'python-installer' 'python-setuptools' 'python-wheel')
    
      22source=("$url/-/archive/v0.3.1/mahoraga-language-v0.3.1.tar.gz")
    
      23sha256sums=('5a8f15202c262b6ba1d2829b355d11db08fd5b9a566de5a2909d9cc6d5ea96d1')
    
      24
    
      25build() {
    
      26  cd "mahoraga-language-v0.3.1"
    
      27  python -m build --wheel
    
      28}
    
      29
    
      30package() {
    
      31  cd "mahoraga-language-v0.3.1"
    
      32  python -m installer --destdir="$pkgdir" dist/*.whl
    
      33}
    
      34

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-19 00:03:55	Low	2
2026-10-18 23:23:07	Low	2