musefetch-git

LOW

maintainer comeT 0 votes scanned 2026-08-28 19:36:26.027686

View on AUR

Why flagged

The package builds from the project's own git repository, uses a SKIP'd checksum due to the git source, and patches a dependency to use the official version; no remote code execution or malicious behavior is present.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from the project's own git repository, uses a SKIP'd checksum due to the git source, and patches a dependency to use the official version; no remote code execution or malicious behavior is present.

PKGBUILD

      1# Maintainer: Shravan Mandava <shravan@mandava8.com>
    
      2 
    
      3pkgname=musefetch-git
    
      4pkgver=cfe0031
    
      5pkgrel=1
    
      6pkgdesc="A fetch script for playerctl"
    
      7arch=('any')
    
      8url='https://github.com/AverageComet250/musefetch'
    
      9license=('BSD-3-Clause')
    
      10
    
      11provides=(musefetch)
    
      12conflicts=(musefetch)
    
      13
    
      14depends=(
    
      15  python
    
      16  python-dbus
    
      17  python-term-image
    
      18)
    
      19makedepends=(
    
      20  git
    
      21  python-build
    
      22  python-installer
    
      23  python-poetry-core
    
      24  python-wheel
    
      25)
    
      26
    
      27source=("${pkgname}::git+https://github.com/AverageComet250/musefetch.git")
    
      28sha256sums=('SKIP')
    
      29
    
      30pkgver() {
    
      31  cd "$srcdir/$pkgname"
    
      32  git describe --long --tags --always | sed 's/\([^-]*-g\)/r\1/;s/-/./g'
    
      33}
    
      34 
    
      35prepare() {
    
      36  cd "$srcdir/$pkgname"
    
      37 
    
      38  # arch python-term-image actually works so...
    
      39  sed -i 's|"term-image @ git+https://github.com/AverageComet250/term-image"|"term-image"|' pyproject.toml
    
      40}
    
      41 
    
      42build() {
    
      43  cd "$srcdir/$pkgname"
    
      44  python -m build --wheel --no-isolation
    
      45}
    
      46 
    
      47package() {
    
      48  cd "$srcdir/$pkgname"
    
      49  python -m installer --destdir="${pkgdir}" dist/*.whl
    
      50  install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      51}
    
      52

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-28 19:36:26	Low	2