moss-os

LOW

maintainer bingusfan 0 votes scanned 2026-10-19 00:03:55.276608

View on AUR

Why flagged

The package builds from source hosted on a public GitLab repository, installs standard components (wheel, icon, docs), and has SKIP'd checksums for local files; the low severity is due to few votes and recent upload, not malicious content.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from source hosted on a public GitLab repository, installs standard components (wheel, icon, docs), and has SKIP'd checksums for local files; the low severity is due to few votes and recent upload, not malicious content.

PKGBUILD

      1# Maintainer: Bingusfan360 <bingusfan360@proton.me>
    
      2#
    
      3# Package name: moss-os. The AUR name `moss` belongs to a deleted 2014-era
    
      4# orphan (an unrelated sequencing server); the board chose NOT to adopt it
    
      5# just for the name and to use moss-os instead (BIN-1711, 2026-10-18).
    
      6# The installed command is `moss`; this package replaces the AUR `mahoragaos`
    
      7# package (rename per the MOSS naming scheme, BIN-949).
    
      8#
    
      9# moss is free and open source. Development and hosting are funded
    
      10# entirely by donations — every contribution goes directly to keeping the
    
      11# project running.
    
      12# Donate (hosted, one-tap): https://www.buymeacoffee.com/bingusfan360
    
      13pkgname=moss-os
    
      14pkgver=0.7.2
    
      15pkgrel=1
    
      16pkgdesc="An agentic backend that *will* be the best. Free and open source, funded by donations: https://www.buymeacoffee.com/bingusfan360"
    
      17arch=('any')
    
      18url="https://gitlab.com/Bingusfan360/MahoragaOS"
    
      19license=('AGPL-3.0-or-later')
    
      20depends=('python' 'hicolor-icon-theme')
    
      21# AUR rename mahoragaos -> moss (Tier-3 gate, BIN-949/BIN-1711): the old
    
      22# package builds the same wheel, so it must be replaced, not co-installed.
    
      23replaces=('mahoragaos')
    
      24conflicts=('mahoragaos')
    
      25makedepends=('python-build' 'python-installer' 'python-setuptools' 'python-wheel')
    
      26source=("$url/-/archive/v0.7.2/MahoragaOS-v0.7.2.tar.gz"
    
      27        "moss.svg"
    
      28        "moss.fish")
    
      29sha256sums=('2f54b2399d41857a566aa1f785a121a8a12c8624b3f5ff64112a19cc66a75a5c'
    
      30            'SKIP'
    
      31            'SKIP')
    
      32
    
      33build() {
    
      34  cd MahoragaOS-v0.7.2
    
      35  /usr/bin/python -m build --wheel
    
      36}
    
      37
    
      38package() {
    
      39  cd MahoragaOS-v0.7.2
    
      40  /usr/bin/python -m installer --destdir="$pkgdir" dist/*.whl
    
      41
    
      42  # Install icon
    
      43  install -Dm644 "$srcdir/moss.svg" "$pkgdir/usr/share/icons/hicolor/scalable/apps/moss.svg"
    
      44
    
      45  # Install license
    
      46  install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      47
    
      48  # Install man pages (from source tarball)
    
      49  install -Dm644 "docs/man/moss.1" "$pkgdir/usr/share/man/man1/moss.1"
    
      50
    
      51  # Install fish completion (from source repo)
    
      52  install -Dm644 "$srcdir/moss.fish" "$pkgdir/usr/share/fish/completions/moss.fish"
    
      53}

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-19 00:03:55	Low	2
2026-10-18 23:23:07	Low	2