proj-git

LOW

maintainer pmattern 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package builds from the official project Git repository, which is a normal AUR practice; the recent orphan/re-adopt status does not imply malicious content.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from the official project Git repository, which is a normal AUR practice; the recent orphan/re-adopt status does not imply malicious content.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: Peter Mattern <pmattern at arcor dot de>
    
      2
    
      3_pkgname=proj
    
      4pkgname="${_pkgname}"-git
    
      5pkgver=9.9.0.r37.ge75fbeda
    
      6pkgrel=1
    
      7pkgdesc='Cartographic Projections and Coordinate Transformations Library'
    
      8arch=('i686' 'x86_64' 'aarch64')
    
      9url='https://github.com/osgeo/proj'
    
      10license=('MIT')
    
      11depends=('curl' 'libtiff')
    
      12makedepends=('git' 'cmake' 'python-pyyaml' 'python-ruamel-yaml' 'python-pytest' 'gtest')
    
      13provides=("$_pkgname" "$_pkgname.4")
    
      14conflicts=("$_pkgname" "$_pkgname.4")
    
      15source=("git+${url}.git")
    
      16sha256sums=("SKIP")
    
      17
    
      18pkgver() {
    
      19  cd ${_pkgname}
    
      20  git describe --always | sed 's/-/.r/;s/-/./'
    
      21}
    
      22
    
      23build() {
    
      24  mkdir -p build ; cd build
    
      25  cmake "${srcdir}"/${_pkgname} -DCMAKE_INSTALL_PREFIX=/usr
    
      26  make
    
      27}
    
      28
    
      29check(){
    
      30  ctest --test-dir build
    
      31}
    
      32
    
      33package() {
    
      34  cd build
    
      35  make DESTDIR="${pkgdir}" install
    
      36  install -D -m644 "${srcdir}"/${_pkgname}/COPYING ${pkgdir}/usr/share/licenses/${pkgname}/LICENSE
    
      37}
    
      38

Changes since previous scan

--- PKGBUILD @ 2026-10-12 00:18
+++ PKGBUILD @ 2026-10-17 00:21
@@ -1,28 +1,28 @@
-# Contributor: Peter Mattern <pmattern at arcor dot de>
+# Maintainer: Peter Mattern <pmattern at arcor dot de>
 
 _pkgname=proj
-pkgname=$_pkgname-git
-pkgver=9.0.0.1406.g0a407325f
+pkgname="${_pkgname}"-git
+pkgver=9.9.0.r37.ge75fbeda
 pkgrel=1
-pkgdesc='Cartographic Projections Library'
-arch=('i686' 'x86_64')
-url='https://github.com/OSGeo/proj.4'
+pkgdesc='Cartographic Projections and Coordinate Transformations Library'
+arch=('i686' 'x86_64' 'aarch64')
+url='https://github.com/osgeo/proj'
 license=('MIT')
-depends=('curl' 'gcc-libs' 'glibc' 'libtiff' 'sqlite')
-makedepends=('git' 'cmake' 'gtest')
-provides=("$_pkgname" "$_pkgname.4" "$_pkgname-configure-git")
-conflicts=("$_pkgname" "$_pkgname.4" "$_pkgname-configure-git")
-source=("$_pkgname::git+https://github.com/OSGeo/proj.4.git")
+depends=('curl' 'libtiff')
+makedepends=('git' 'cmake' 'python-pyyaml' 'python-ruamel-yaml' 'python-pytest' 'gtest')
+provides=("$_pkgname" "$_pkgname.4")
+conflicts=("$_pkgname" "$_pkgname.4")
+source=("git+${url}.git")
 sha256sums=("SKIP")
 
 pkgver() {
-  cd $_pkgname
-  git describe | sed 's:-:.:g'
+  cd ${_pkgname}
+  git describe --always | sed 's/-/.r/;s/-/./'
 }
 
 build() {
   mkdir -p build ; cd build
-  cmake $srcdir/$_pkgname -DCMAKE_INSTALL_PREFIX=/usr
+  cmake "${srcdir}"/${_pkgname} -DCMAKE_INSTALL_PREFIX=/usr
   make
 }
 
@@ -32,7 +32,7 @@
 
 package() {
   cd build
-  make DESTDIR="$pkgdir" install
-  install -D -m644 $srcdir/$_pkgname/COPYING $pkgdir/usr/share/licenses/$pkgname/LICENSE
+  make DESTDIR="${pkgdir}" install
+  install -D -m644 "${srcdir}"/${_pkgname}/COPYING ${pkgdir}/usr/share/licenses/${pkgname}/LICENSE
 }
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 15:13:59	Medium	1
2026-10-12 00:18:51	Low	2
2026-10-11 00:26:05	Low	2
2026-10-10 22:16:18	Medium	1
2026-06-18 16:11:54	Clean	0