pawnix

LOW
maintainer vaishnav 0 votes scanned 2026-10-17 00:21:55.226236
View on AUR
Why flagged

The package builds from source hosted on GitHub under the project's repository, installs only Python wheels and documentation, and has no remote code execution or untrusted binary downloads; the low severity is due to few votes and recent upload, not inherent risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from source hosted on GitHub under the project's repository, installs only Python wheels and documentation, and has no remote code execution or untrusted binary downloads; the low severity is due to few votes and recent upload, not inherent risk.

PKGBUILD

1# Maintainer: vaishnav <vaishnav.sabari.girish@gmail.com>
2
3pkgname=pawnix
4pkgver=0.1.1
5pkgrel=1
6pkgdesc='Keyboard-first terminal chess client with local play and Lichess support'
7arch=('any')
8url='https://github.com/a-shygun/Pawnix'
9license=('MIT')
10depends=(
11 'python>=3.10'
12 'python-chess'
13 'python-keyring' # OS credential store for Lichess OAuth tokens
14)
15makedepends=(
16 'python-build'
17 'python-installer'
18 'python-setuptools' # swap for python-hatchling / python-flit-core if pyproject.toml says so
19 'python-wheel'
20)
21source=("$pkgname-$pkgver.tar.gz::$url/archive/refs/tags/v$pkgver.tar.gz")
22sha256sums=('SKIP') # run `updpkgsums` to fill this in
23
24build() {
25 cd "Pawnix-$pkgver"
26 python -m build --wheel --no-isolation
27}
28
29package() {
30 cd "Pawnix-$pkgver"
31 python -m installer --destdir="$pkgdir" dist/*.whl
32 install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
33 install -Dm644 README.md "$pkgdir/usr/share/doc/$pkgname/README.md"
34}
35

Scan history

Scanned at (UTC)SeverityRules
2026-10-17 00:21:55 Low 2
2026-10-16 00:12:47 Low 2
2026-10-15 00:28:05 Low 2
2026-10-14 13:20:15 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion