pathvalidate-cli

LOW

maintainer Dominiquini 1 votes scanned 2026-10-29 01:51:16.702666

View on AUR

Why flagged

The package builds from a source tarball hosted on PyPI, which is a trusted Python packaging repository; the flagged low votes and recent upload are minor concerns but do not indicate active malice or supply chain risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a source tarball hosted on PyPI, which is a trusted Python packaging repository; the flagged low votes and recent upload are minor concerns but do not indicate active malice or supply chain risk.

PKGBUILD

      1# Maintainer: Rafael Dominiquini <rafaeldominiquini at gmail dot com>
    
      2
    
      3pkgauthor="thombashi"
    
      4pkgname="pathvalidate-cli"
    
      5pkgver=0.2.1
    
      6pkgrel=1
    
      7pkgdesc="The tool can sanitize/validate strings such as file-names/file-paths"
    
      8
    
      9_pypi_package=${pkgname}
    
      10_pypi_version=${pkgver}
    
      11
    
      12license=('MIT')
    
      13arch=('any')
    
      14
    
      15_url_pypi="https://pypi.org/project/${pkgname}/"
    
      16_url_github="https://github.com/${pkgauthor}/${pkgname}"
    
      17url=${_url_github}
    
      18
    
      19provides=("${_pypi_package%-cli}")
    
      20
    
      21makedepends=('python-setuptools' 'python-setuptools-scm' 'python-wheel' 'python-build' 'python-installer')
    
      22depends=('bash' 'python' 'python-pathvalidate' 'python-loguru' 'python-pytablewriter' 'python-msgfy' 'python-click')
    
      23
    
      24source=("https://files.pythonhosted.org/packages/source/${_pypi_package::1}/${_pypi_package//-/_}/${_pypi_package//-/_}-${_pypi_version}.tar.gz")
    
      25# source=("${_pypi_package}-${_pypi_version}.tar.gz::${_url_github}/archive/refs/tags/v${pkgver}.tar.gz")
    
      26sha256sums=('9998f4379d29ff65de4808a8a0e6ef75d94a1e6e40659ff984fa50ba0eb90b80')
    
      27
    
      28build() {
    
      29    cd "${srcdir}/${_pypi_package//-/_}-${_pypi_version}/" || exit
    
      30
    
      31    python -m build --wheel --no-isolation
    
      32}
    
      33
    
      34package() {
    
      35    cd "${srcdir}/${_pypi_package//-/_}-${_pypi_version}/" || exit
    
      36
    
      37    python -m installer --destdir="${pkgdir}" dist/*.whl
    
      38
    
      39    install -Dm644 "README.rst" "${pkgdir}/usr/share/doc/${pkgname}/README.md"
    
      40
    
      41    install -Dm644 "LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      42}
    
      43

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-29 01:51:16	Low	2