python-aerospike

LOW

maintainer taotieren 0 votes scanned 2026-09-12 07:11:01.741418

View on AUR

Why flagged

The package builds from the project's own git repositories with SKIP'd checksums for submodules, which is a supply-chain risk, but no remote code execution or malicious behavior is present; the main source has a valid checksum and the build process is transparent.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from the project's own git repositories with SKIP'd checksums for submodules, which is a supply-chain risk, but no remote code execution or malicious behavior is present; the main source has a valid checksum and the build process is transparent.

PKGBUILD

      1# Maintainer: taotieren <admin@taotieren.com>
    
      2
    
      3pkgname=python-aerospike
    
      4_name=${pkgname#python-}
    
      5pkgver=19.2.1
    
      6pkgrel=1
    
      7pkgdesc="Aerospike Client Library for Python"
    
      8provides=(${pkgname})
    
      9conflicts=(${pkgname})
    
      10arch=($CARCH)
    
      11url="https://github.com/aerospike/aerospike-client-python"
    
      12depends=(
    
      13    glibc
    
      14    libyaml
    
      15    openssl
    
      16    zlib
    
      17    python
    
      18)
    
      19_pymakedeps=(
    
      20    versioningit
    
      21    parver
    
      22)
    
      23makedepends=(
    
      24    git
    
      25    'python-build'
    
      26    'python-installer'
    
      27    'python-setuptools'
    
      28    'python-wheel'
    
      29    "${_pymakedeps[@]/#/python-}"
    
      30)
    
      31optdepends=()
    
      32license=('Apache-2.0')
    
      33source=(
    
      34    "${_name}::git+${url}.git#tag=$pkgver"
    
      35    "aerospike-client-c::git+https://github.com/aerospike/aerospike-client-c.git"
    
      36    "common::git+https://github.com/aerospike/aerospike-common.git"
    
      37    "mod-lua::git+https://github.com/aerospike/aerospike-mod-lua.git"
    
      38    "lua::git+https://github.com/aerospike/lua.git"
    
      39)
    
      40sha256sums=('b6f06a236d96601b074c31eb168b864859884a27ccd34ed50802c5f5eb51464a'
    
      41            'SKIP'
    
      42            'SKIP'
    
      43            'SKIP'
    
      44            'SKIP')
    
      45
    
      46prepare() {
    
      47    git -C "${srcdir}/${_name}" clean -dfx
    
      48    cd ${srcdir}/${_name}
    
      49    sed -i -E '/versioningit|parver/s/==[0-9][^"]*//' pyproject.toml
    
      50    git submodule init
    
      51    git config submodule.aerospike-client-c.url "$srcdir/aerospike-client-c"
    
      52    git -c protocol.file.allow=always submodule update
    
      53    cd ${srcdir}/${_name}/aerospike-client-c
    
      54    git submodule init
    
      55    git config submodule.modules/common.url "$srcdir/common"
    
      56    git config submodule.modules/mod-lua.url "$srcdir/mod-lua"
    
      57    git config submodule.modules/lua.url "$srcdir/lua"
    
      58    git -c protocol.file.allow=always submodule update
    
      59}
    
      60
    
      61build() {
    
      62    cd "${srcdir}/${_name}"
    
      63    python -m build --wheel --no-isolation
    
      64}
    
      65
    
      66package() {
    
      67    cd "${srcdir}/${_name}"
    
      68    python -m installer --destdir="${pkgdir}" dist/*.whl
    
      69    install -Dm0644 LICENSE -t "${pkgdir}/usr/share/licenses/${pkgname}/"
    
      70}
    
      71

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-12 07:11:01	Low	2