python-asysocks
The package builds from a source tarball hosted on the official Python package index (pythonhosted.org), which is a trusted and project-appropriate source; the recently orphaned flag is a metadata concern, not a security risk.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from a source tarball hosted on the official Python package index (pythonhosted.org), which is a trusted and project-appropriate source; the recently orphaned flag is a metadata concern, not a security risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
orphaned_readopted
This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.
PKGBUILD
# Maintainer: GI_Jack <GI_Jack@hackermail.com>
pkgname=python-asysocks
_pkgname=asysocks
pkgver=0.2.13
pkgrel=1
pkgdesc="Socks5/Socks4 client and server python library"
url="https://pypi.org/project/asysocks"
arch=('any')
license=('MIT')
depends=('python')
makedepends=('python-build' 'python-installer' 'python-wheel')
source=("https://files.pythonhosted.org/packages/source/${_pkgname::1}/${_pkgname}/${_pkgname}-${pkgver}.tar.gz")
sha256sums=('44185b2c471e63b7293173967eef3b0f5e60ed5cc1b7650a30a9569e49ff25f8')
build() {
cd "${_pkgname}-${pkgver}"
python -m build --wheel --no-isolation
}
package() {
cd "${_pkgname}-${pkgver}"
python -m installer --destdir="${pkgdir}" dist/*.whl
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |
| 2026-10-12 00:18:51 | Low | 2 |
| 2026-10-11 02:16:32 | Medium | 1 |
| 2026-10-11 00:26:05 | Low | 2 |
| 2026-10-10 22:16:18 | Medium | 1 |
| 2026-06-18 16:11:54 | Clean | 0 |