pkgforge

LOW

maintainer goun7 0 votes scanned 2026-09-08 15:17:32.240420

View on AUR

Why flagged

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: goun7 <https://github.com/goun7/pkgforge>
    
      2pkgname=pkgforge
    
      3pkgver=2.2.0
    
      4pkgrel=1
    
      5pkgdesc="Modern .deb/.rpm package converter, safety analyzer, and lifecycle manager for Arch Linux"
    
      6arch=('any')
    
      7url="https://github.com/goun7/pkgforge"
    
      8license=('GPL-3.0-or-later')
    
      9depends=(
    
      10    'python'
    
      11    'pacman'
    
      12    'fakeroot'
    
      13    'libarchive'
    
      14)
    
      15makedepends=(
    
      16    'git'
    
      17    'python-build'
    
      18    'python-installer'
    
      19    'python-setuptools'
    
      20    'python-wheel'
    
      21)
    
      22optdepends=(
    
      23    'python-pyqt6: GUI interface (pkgforge gui)'
    
      24    'python-pyqt6-sip: GUI interface'
    
      25    'python-fastapi: REST API (pkgforge serve-api)'
    
      26    'python-uvicorn: REST API server'
    
      27    'namcap: Static package analysis'
    
      28    'bubblewrap: Build sandbox isolation'
    
      29    'debtap: Legacy DEB conversion fallback'
    
      30    'rpmextract: RPM extraction support'
    
      31    'distrobox: Container fallback support'
    
      32    'clamav: Malware scanning'
    
      33    'trivy: OCI image security scanning'
    
      34    'xdelta3: Binary delta updates'
    
      35    'gnupg: Package signing'
    
      36)
    
      37provides=('pkgforge')
    
      38conflicts=('pkgforge')
    
      39# NOTE: sha256 verified against the published v2.1.0 tag tarball (2026-09-07).
    
      40source=("$pkgver.tar.gz::https://github.com/goun7/pkgforge/archive/refs/tags/v$pkgver.tar.gz")
    
      41sha256sums=('68c3f8734582ba17ab62805b9d547ad6fba86dcd9c20f3ab6b1036531479cf6b')
    
      42
    
      43prepare() {
    
      44    cd "$srcdir/pkgforge-$pkgver"
    
      45    # No special prepare needed
    
      46}
    
      47
    
      48build() {
    
      49    cd "$srcdir/pkgforge-$pkgver"
    
      50    python -m build --wheel --no-isolation
    
      51}
    
      52
    
      53package() {
    
      54    cd "$srcdir/pkgforge-$pkgver"
    
      55    python -m installer --destdir="$pkgdir" dist/*.whl
    
      56
    
      57    # Remove __pycache__ directories (bytecode — unnecessary in packages)
    
      58    find "$pkgdir" -type d -name __pycache__ -exec rm -rf {} + 2>/dev/null || true
    
      59
    
      60    # Desktop entry, icon, metainfo, polkit policy, completions and helper
    
      61    # scripts are shipped by the wheel's data-files and already installed by
    
      62    # `python -m installer` above — do NOT reinstall them here (a manual
    
      63    # install previously produced a duplicate menu entry under a second name).
    
      64
    
      65    # Install systemd timer for delta auto-updates
    
      66    if [ -f data/pkgforge-delta.service ]; then
    
      67        install -Dm644 data/pkgforge-delta.service "$pkgdir/usr/lib/systemd/system/pkgforge-delta.service"
    
      68        install -Dm644 data/pkgforge-delta.timer "$pkgdir/usr/lib/systemd/system/pkgforge-delta.timer"
    
      69    fi
    
      70}
    
      71

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-08 15:17:32	Low	1