phichain-git

CLEAN

maintainer kekmacska 0 votes scanned 2026-09-27 00:07:07.510666

View on AUR

Triggered rules

Clean AI review downgraded a static finding llm_review

The static rules flagged this LOW, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it CLEAN (confidence 95%): The package builds from the project's own GitHub source using standard Rust tooling, with no remote code execution, obfuscated payloads, or untrusted prebuilt binaries; the low-vote and recent upload are not indicators of inherent risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: kekmacska
    
      2
    
      3pkgname=phichain-git
    
      4pkgver=1.0.0.beta.7.r2.geba9f70
    
      5pkgrel=1
    
      6pkgdesc="Phigros charting toolchain"
    
      7arch=('any')
    
      8url="https://phichain.rs/"
    
      9license=('LGPL-3.0')
    
      10depends=(xz bzip2 alsa-lib systemd-libs)
    
      11makedepends=('git' 'rust' 'cargo' 'clang' 'lld')
    
      12source=("git+https://github.com/Ivan-1F/phichain.git" "${pkgname%-*}.desktop" "asset-resolution.patch")
    
      13b2sums=('SKIP'
    
      14        '9248b301702818b9bac5b83375905993d0b548f00555df41789e69c401f751d10e1388394bca4a53875f59875d547f8d0299688ce37174ffa6f804bf2c9dbe88'
    
      15        '3f6b9ca2d2fde74f8ab6c91d79dc0aab140cae880df15a82d30f6493e36490c69c9f66fc65643c9cab36a66fb69657776f832d4c02d1ecacec5f2c3ac20b7aed')
    
      16
    
      17pkgver() {
    
      18  cd "${pkgname%-*}"
    
      19  git describe --long --tags | sed -r 's/([^-]*-g)/r\1/;s/-/./g;s/v//g'
    
      20}
    
      21
    
      22prepare() {
    
      23    cd "${pkgname%-*}"
    
      24    oxipng -o max -r -p -s -v -t "$(nproc)" -z --zi 100 --ziwi 10 --brute-level 5 --brute-lines 16 assets/respack
    
      25    patch -Np1 -i "$srcdir/asset-resolution.patch"
    
      26}
    
      27
    
      28build() {
    
      29    cd "${pkgname%-*}"
    
      30
    
      31    # explicitly set clang as the default compiler for c/c++ backends to prevent the infamous linker error
    
      32    export CC=clang
    
      33    export CXX=clang++
    
      34    export RUSTFLAGS="\
    
      35        -C opt-level=3 \
    
      36        -C target-cpu=native \
    
      37        -C embed-bitcode=yes \
    
      38        -C codegen-units=1 \
    
      39        -C strip=symbols \
    
      40        -C relocation-model=pic \
    
      41        -C link-arg=-fuse-ld=lld \
    
      42        -C link-arg=-Wl,--icf=safe \
    
      43        -C link-arg=-Wl,--gc-sections \
    
      44        -C link-arg=-Wl,--as-needed \
    
      45        -C link-arg=-Wl,-O3 \
    
      46        -C link-arg=-fno-plt \
    
      47    "
    
      48
    
      49    cargo build --release
    
      50}
    
      51
    
      52
    
      53package() {
    
      54    cd "${pkgname%-*}"
    
      55
    
      56    install -Dm755 "target/release/${pkgname%-*}" \
    
      57        "$pkgdir/usr/bin/${pkgname%-*}"
    
      58
    
      59    install -d "$pkgdir/usr/share/${pkgname%-*}/respack"
    
      60    install -d "$pkgdir/usr/share/${pkgname%-*}/audio"
    
      61
    
      62    install -Dm644 assets/respack/* \
    
      63        "$pkgdir/usr/share/${pkgname%-*}/respack/"
    
      64
    
      65    install -Dm644 assets/audio/* \
    
      66        "$pkgdir/usr/share/${pkgname%-*}/audio/"
    
      67
    
      68    install -Dm644 "$srcdir/${pkgname%-*}.desktop" \
    
      69        "$pkgdir/usr/share/applications/${pkgname%-*}.desktop"
    
      70
    
      71    install -Dm644 LICENSE \
    
      72        "$pkgdir/usr/share/licenses/${pkgname%-*}/LICENSE"
    
      73}
    
      74

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-27 00:07:07	Clean	2
2026-09-26 23:16:08	Low	1