nogforge

LOW

maintainer jetomev 0 votes scanned 2026-10-08 04:07:28.496369

View on AUR

Why flagged

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: jetomev <jetomev@gmail.com>
    
      2# Co-developer: Claude (Anthropic)
    
      3
    
      4pkgname=nogforge
    
      5pkgver=1.3.0
    
      6pkgrel=1
    
      7pkgdesc="Packages the KognogOS way, in a terminal: what's installed, searching and installing, and updates you can read, on top of nog"
    
      8arch=('any')
    
      9url="https://github.com/jetomev/nogforge"
    
      10license=('GPL3')
    
      11# nog 1.6.1: the --json answers nogForge reads, and `nog update a b c` (only
    
      12# the ticked ones). forgekit 0.5.2: the Forge Suite's shared base (the bottom
    
      13# bar that follows the screen). Both must be on the AUR first: dependency order.
    
      14depends=('python' 'python-textual' 'python-rich' 'python-forgekit>=0.6.0' 'nog>=1.7.0')
    
      15# v1.1.0: nog runs inside nogForge and the password is asked in its own box:
    
      16# no desktop password window needed (forgekit 0.6.0); nog 1.7.0 reports its steps
    
      17optdepends=('archlinux-appstream-data: app names and category badges')
    
      18source=("${pkgname}-${pkgver}.tar.gz::${url}/releases/download/v${pkgver}/${pkgname}-${pkgver}.tar.gz"
    
      19        "${pkgname}-${pkgver}.tar.gz.asc::${url}/releases/download/v${pkgver}/${pkgname}-${pkgver}.tar.gz.asc")
    
      20sha256sums=('fbb66221306e11247f431b4cadb77304639fe2f03091d111b670ddff1b92e321'
    
      21            'SKIP')
    
      22# Javier (jetomev) release-signing key — import via:
    
      23#   curl -s https://github.com/jetomev.gpg | gpg --import
    
      24validpgpkeys=('32E1D2AB9380BFD6BFE3BC1EAC2A3407CC070F9E')
    
      25
    
      26check() {
    
      27    cd "${srcdir}/${pkgname}-${pkgver}"
    
      28    # Every screen and flow headless, against a stand-in nog that prints nog's
    
      29    # JSON: no test installs, removes or updates anything, and none needs the
    
      30    # builder's own nog. PYTHONDONTWRITEBYTECODE=1 keeps .pyc caches out of
    
      31    # the source tree, so package() can't bundle them (the grubForge v1.0.2
    
      32    # install-conflict class).
    
      33    PYTHONDONTWRITEBYTECODE=1 python -m unittest discover tests
    
      34}
    
      35
    
      36package() {
    
      37    cd "${srcdir}/${pkgname}-${pkgver}"
    
      38    find nogforge -type d -name __pycache__ -exec rm -rf {} + 2>/dev/null || true
    
      39
    
      40    install -dm755 "${pkgdir}/usr/lib/${pkgname}"
    
      41    cp -r nogforge "${pkgdir}/usr/lib/${pkgname}/"
    
      42    cp main.py "${pkgdir}/usr/lib/${pkgname}/"
    
      43
    
      44    install -dm755 "${pkgdir}/usr/bin"
    
      45    cat > "${pkgdir}/usr/bin/${pkgname}" << 'LAUNCH'
    
      46#!/bin/sh
    
      47exec python /usr/lib/nogforge/main.py "$@"
    
      48LAUNCH
    
      49    chmod 755 "${pkgdir}/usr/bin/${pkgname}"
    
      50
    
      51    install -Dm644 nogforge.1 "${pkgdir}/usr/share/man/man1/${pkgname}.1"
    
      52    install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      53}
    
      54

Changes since previous scan

--- PKGBUILD @ 2026-10-06 00:13
+++ PKGBUILD @ 2026-10-08 04:07
@@ -2,7 +2,7 @@
 # Co-developer: Claude (Anthropic)
 
 pkgname=nogforge
-pkgver=1.1.1
+pkgver=1.3.0
 pkgrel=1
 pkgdesc="Packages the KognogOS way, in a terminal: what's installed, searching and installing, and updates you can read, on top of nog"
 arch=('any')
@@ -17,7 +17,7 @@
 optdepends=('archlinux-appstream-data: app names and category badges')
 source=("${pkgname}-${pkgver}.tar.gz::${url}/releases/download/v${pkgver}/${pkgname}-${pkgver}.tar.gz"
         "${pkgname}-${pkgver}.tar.gz.asc::${url}/releases/download/v${pkgver}/${pkgname}-${pkgver}.tar.gz.asc")
-sha256sums=('9fd76043169cd6c81e924dcd61fff68601e7c093cd6f1c802c6f04d651ded9a4'
+sha256sums=('fbb66221306e11247f431b4cadb77304639fe2f03091d111b670ddff1b92e321'
             'SKIP')
 # Javier (jetomev) release-signing key — import via:
 #   curl -s https://github.com/jetomev.gpg | gpg --import

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-08 04:07:28	Low	1
2026-10-06 00:13:36	Clean	2
2026-10-05 23:40:58	Low	1