pila-git

LOW

maintainer igalmarino 0 votes scanned 2026-11-06 06:11:22.019786

View on AUR

Why flagged

The package builds from source hosted on the maintainer's GitHub, which is normal for AUR; the low severity is due to few votes and recent upload, not malicious content.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from source hosted on the maintainer's GitHub, which is normal for AUR; the low severity is due to few votes and recent upload, not malicious content.

PKGBUILD

      1# Maintainer: Ignacio Galmarino <igalmarino@gmail.com>
    
      2#
    
      3# Kept in pila's repository (packaging/aur/pila-git); the AUR repository is a
    
      4# copy of this file and its .SRCINFO (makepkg --printsrcinfo > .SRCINFO).
    
      5
    
      6pkgname=pila-git
    
      7pkgver=0.2.1.r207.g8b027d2
    
      8pkgrel=1
    
      9pkgdesc='A stacking Wayland compositor built on Smithay'
    
      10arch=(x86_64 aarch64)
    
      11url='https://github.com/igalmarino/pila'
    
      12license=(GPL-3.0-or-later)
    
      13# The libraries pila links (readelf -d), EGL (loaded at runtime through
    
      14# libglvnd) and Xwayland, which pila starts for X11 apps.
    
      15depends=(
    
      16    glibc
    
      17    libgcc
    
      18    libglvnd
    
      19    libinput
    
      20    libxkbcommon
    
      21    mesa
    
      22    seatd
    
      23    systemd-libs
    
      24    xorg-xwayland
    
      25)
    
      26makedepends=(cargo git pkgconf)
    
      27optdepends=(
    
      28    'kitty: the default terminal (or foot, alacritty, ...)'
    
      29    'xdg-desktop-portal-wlr: screen sharing'
    
      30    'grim: screenshots'
    
      31    'slurp: picking the screen to share, and screenshot regions'
    
      32    'xdg-desktop-portal-gtk: file chooser and other portals'
    
      33    'wl-clipboard: clipboard from the command line'
    
      34    'swaylock: locking the session'
    
      35)
    
      36provides=(pila)
    
      37conflicts=(pila)
    
      38backup=(
    
      39    etc/xdg/xdg-desktop-portal/pila-portals.conf
    
      40    etc/xdg/xdg-desktop-portal-wlr/pila
    
      41)
    
      42source=("pila::git+$url.git")
    
      43sha256sums=(SKIP)
    
      44
    
      45pkgver() {
    
      46    cd pila
    
      47    printf '%s.r%s.g%s' \
    
      48        "$(sed -n 's/^version = "\(.*\)"/\1/p' Cargo.toml | head -n1)" \
    
      49        "$(git rev-list --count HEAD)" \
    
      50        "$(git rev-parse --short=7 HEAD)"
    
      51}
    
      52
    
      53prepare() {
    
      54    cd pila
    
      55    export RUSTUP_TOOLCHAIN=stable
    
      56    cargo fetch --locked --target "$(rustc -vV | sed -n 's/host: //p')"
    
      57}
    
      58
    
      59build() {
    
      60    cd pila
    
      61    export RUSTUP_TOOLCHAIN=stable
    
      62    export CARGO_TARGET_DIR=target
    
      63    cargo build --frozen --release
    
      64}
    
      65
    
      66check() {
    
      67    cd pila
    
      68    export RUSTUP_TOOLCHAIN=stable
    
      69    export CARGO_TARGET_DIR=target
    
      70    cargo test --frozen --release
    
      71}
    
      72
    
      73package() {
    
      74    cd pila
    
      75    # The same files, paths and session entry as a hand install.
    
      76    PREFIX=/usr DESTDIR="$pkgdir" scripts/install --no-build
    
      77    install -Dm644 -t "$pkgdir/usr/share/doc/pila" README.md config.example.toml
    
      78}
    
      79

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-06 06:11:22	Low	2