pebble-tool

MEDIUM

maintainer etbusch 0 votes scanned 2026-09-01 17:48:51.913915

View on AUR

Why flagged

A non-pip/npm package manager (pipx, uv, poetry, cargo install, go install, gem, conda…) fetches and builds an external package at build time, outside source=() and makepkg's checksums.

Triggered rules

Medium External install via pipx/uv/poetry/cargo/go/gem alt_pkg_manager_install

A non-pip/npm package manager (pipx, uv, poetry, cargo install, go install, gem, conda…) fetches and builds an external package at build time, outside source=() and makepkg's checksums.

PKGBUILD:18 optdepends=('pypkjs: PebbleKit JS / phone-simulator sensor emulation for `pebble install --emulator --pypkjs` (install with `uv tool install pypkjs`, not packaged for Arch due to the stpyv8 dependency)')

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Eric Busch <me@etbus.ch>
    
      2_name=pebble_tool
    
      3pkgname=pebble-tool
    
      4pkgver=5.0.39
    
      5pkgrel=3
    
      6pkgdesc="Command-line tool for the Pebble SDK: build, install and debug apps for Pebble smartwatches"
    
      7arch=('any')
    
      8url="https://github.com/coredevices/pebble-tool"
    
      9license=('MIT')
    
      10depends=('python' 'python-cobs' 'python-colorama' 'python-freetype-py'
    
      11         'python-google-auth' 'python-google-auth-oauthlib' 'python-httplib2'
    
      12         'python-libpebble2' 'python-oauth2client' 'python-pillow'
    
      13         'python-packaging' 'python-progressbar' 'python-pyasn1'
    
      14         'python-pyasn1-modules' 'python-pyqrcode' 'python-pyserial'
    
      15         'python-pypng' 'python-requests' 'python-rsa' 'python-six'
    
      16         'python-sourcemap' 'python-websocket-client' 'websockify'
    
      17         'python-wheel' 'npm')
    
      18optdepends=('pypkjs: PebbleKit JS / phone-simulator sensor emulation for `pebble install --emulator --pypkjs` (install with `uv tool install pypkjs`, not packaged for Arch due to the stpyv8 dependency)')
    
      19makedepends=('python-build' 'python-installer' 'python-wheel' 'python-hatchling')
    
      20source=("https://files.pythonhosted.org/packages/c5/6e/444de81db97ea030e219e82fdcfcc6fd5ff3d591d4003e1f4685186232b0/$_name-$pkgver.tar.gz")
    
      21sha256sums=('c2ec1eef7fd0ff73f4b0773492da7ed4b36bacb504e6813c41a560a9e7bf3564')
    
      22
    
      23build() {
    
      24  cd "$_name-$pkgver"
    
      25  python -m build --wheel --no-isolation
    
      26}
    
      27
    
      28package() {
    
      29  cd "$_name-$pkgver"
    
      30  python -m installer --destdir="$pkgdir" dist/*.whl
    
      31  install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      32}
    
      33

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-01 17:48:51	Medium	2
2026-08-24 03:23:27	Clean	3
2026-08-24 03:21:59	Medium	2