mrdocs-git

maintainer damian101 · 0 votes · scanned 2026-08-18 00:03:42.021799
LOW
View on AUR ↗
Why flagged The package builds from the project's own git repositories (github.com/cppalliance/mrdocs and github.com/llvm/llvm-project), which are legitimate sources; SKIP'd checksums are expected for git sources and do not imply remote code execution or supply-chain risk.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from the project's own git repositories (github.com/cppalliance/mrdocs and github.com/llvm/llvm-project), which are legitimate sources; SKIP'd checksums are expected for git sources and do not imply remote code execution or supply-chain risk.

PKGBUILD

1# Maintainer: Damian Höster <damian.hoester@posteo.de>
2
3_pkgname=mrdocs
4pkgname=$_pkgname-git
5pkgver=0.8.0.r209.faea11b9c.clang24.0.0.f33323e9
6pkgrel=1
7pkgdesc='C++ documentation generator (git version; built with LLVM matching system clang)'
8arch=(x86_64)
9url=https://www.mrdocs.com
10license=('Apache-2.0 WITH LLVM-exception')
11depends=(
12 fmt
13 gcc-libs
14 glibc
15 zstd
16)
17makedepends=(
18 clang
19 cmake
20 git
21 ninja
22 python
23)
24provides=($_pkgname)
25conflicts=($_pkgname)
26source=(
27 $_pkgname::git+https://github.com/cppalliance/mrdocs.git
28 llvm-project::git+https://github.com/llvm/llvm-project.git
29)
30sha256sums=(
31 SKIP
32 SKIP
33)
34
35pkgver() {
36 local _mrdocs_ver _ver_str _commit _semver _clang_suffix
37
38 _mrdocs_ver=$(git -C $_pkgname describe --long --tags |
39 sed -E 's/^v//; s/-([^-]*)-g([^-]*)$/.r\1.\2/; s/-/./g')
40
41 _ver_str=$(clang --version 2>/dev/null | head -n1 || true)
42 _commit=$(echo "$_ver_str" | grep -oE '[0-9a-f]{40}' || true)
43 _semver=$(echo "$_ver_str" | grep -oP 'clang version \K[0-9]+\.[0-9]+\.[0-9]+' || true)
44
45 if [[ -n $_commit ]]; then
46 _clang_suffix=".clang${_semver}.${_commit:0:8}"
47 elif [[ -n $_semver ]]; then
48 _clang_suffix=".clang${_semver}"
49 else
50 _clang_suffix=''
51 fi
52
53 printf '%s%s' "$_mrdocs_ver" "$_clang_suffix"
54}
55
56prepare() {
57 local _ver_str _commit _semver
58 _ver_str=$(clang --version 2>/dev/null | head -n1 || true)
59 _commit=$(echo "$_ver_str" | grep -oE '[0-9a-f]{40}' || true)
60 _semver=$(echo "$_ver_str" | grep -oP 'clang version \K[0-9]+\.[0-9]+\.[0-9]+' || true)
61
62 # Check out matching commit (for git packages) or official release tag
63 if [[ -n $_commit ]]; then
64 msg2 "Checking out system Clang commit: $_commit"
65 git -C llvm-project checkout --force "$_commit"
66 elif [[ -n $_semver ]] && git -C llvm-project rev-parse "llvmorg-$_semver" >/dev/null 2>&1; then
67 msg2 "Checking out system Clang release tag: llvmorg-$_semver"
68 git -C llvm-project checkout --force "llvmorg-$_semver"
69 else
70 msg2 "Defaulting to LLVM main branch"
71 git -C llvm-project checkout --force main
72 fi
73
74 # Ensure LLVM embeds canonical upstream repository info in version strings.
75 git -C llvm-project remote set-url origin https://github.com/llvm/llvm-project.git
76
77 rm -rf $_pkgname/build/third-party/source/llvm
78 mkdir -p $_pkgname/build/third-party/source/llvm
79 cp -ra llvm-project/* $_pkgname/build/third-party/source/llvm/
80 cp -ra llvm-project/.git $_pkgname/build/third-party/source/llvm/ 2>/dev/null || true
81
82 cd $_pkgname
83 python bootstrap.py --yes --skip-build --no-run-configs
84}
85
86build() {
87 cmake -S $_pkgname -B build --preset release-linux
88 cmake --build build
89}
90
91package() {
92 DESTDIR="$pkgdir" cmake --install build
93 install -Dm644 $_pkgname/LICENSE.txt -t "$pkgdir"/usr/share/licenses/$pkgname
94}
95

Scan history

Scanned at (UTC)SeverityRules
2026-08-18 00:03:42 LOW 2
2026-08-17 11:35:53 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion