python-caio

LOW

maintainer medaminezghal 0 votes scanned 2026-10-19 00:03:55.276608

View on AUR

Why flagged

The package builds from the project's own source on GitHub, which is a normal AUR practice; the recent orphan re-adoption is a metadata flag but does not imply malicious content.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from the project's own source on GitHub, which is a normal AUR practice; the recent orphan re-adoption is a metadata flag but does not imply malicious content.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: 
    
      2# Contributor: Mark Wagie <mark dot wagie at proton dot me>
    
      3pkgname=python-caio
    
      4_name=${pkgname#python-}
    
      5pkgver=0.9.25
    
      6pkgrel=1
    
      7pkgdesc="Linux AIO c python bindings"
    
      8arch=('x86_64')
    
      9url="https://github.com/mosquito/caio"
    
      10license=('Apache-2.0')
    
      11depends=('python')
    
      12makedepends=(
    
      13  'python-build'
    
      14  'python-installer'
    
      15  'python-setuptools'
    
      16  'python-wheel'
    
      17)
    
      18#checkdepends=(
    
      19#  'python-pytest'
    
      20#  'python-pytest-aiohttp'
    
      21##  'python-pytest-aiomisc'  ## TODO
    
      22#  'python-pytest-asyncio'
    
      23#)
    
      24source=("$_name-$pkgver.tar.gz::$url/archive/refs/tags/$pkgver.tar.gz")
    
      25#source=("https://files.pythonhosted.org/packages/source/${_name::1}/$_name/$_name-$pkgver.tar.gz")
    
      26sha256sums=('653e33772d88320169fe6bb3f78a04072e80e43be6868792a57dfb4882486531')
    
      27
    
      28build() {
    
      29  cd "$_name-$pkgver"
    
      30  python -m build --wheel --no-isolation
    
      31}
    
      32
    
      33#check() {
    
      34#  cd "$_name-$pkgver"
    
      35#  PYTHONPATH=. pytest
    
      36#}
    
      37
    
      38package() {
    
      39  cd "$_name-$pkgver"
    
      40  python -m installer --destdir="$pkgdir" dist/*.whl
    
      41}
    
      42

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-19 00:03:55	Low	2
2026-10-18 23:23:07	Medium	1
2026-06-18 16:11:54	Clean	0