python-calgebra-git

maintainer claudefrancois · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged Package builds from a legitimate project Git repository with a SKIP'd checksum, which is common for -git packages; no malicious payloads or remote code execution observed.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 90%): Package builds from a legitimate project Git repository with a SKIP'd checksum, which is common for -git packages; no malicious payloads or remote code execution observed.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# shellcheck shell=bash
    
      2# -*- sh -*-
    
      3
    
      4# Contributor: Klaus Alexander Seiﬆrup <$(echo 0x1fd+d59decfa=40 | tr 0-9+a-f=x ka-i@p-u.l)>
    
      5
    
      6pkgname='python-calgebra-git'
    
      7_pkgname="${pkgname/-git/}"
    
      8_srcname="${_pkgname/python-/}"
    
      9_srcdir="${_srcname}"
    
      10pkgdesc='Python set() operations for calendar intervals (development version)'
    
      11pkgver=0.10.11.r0.g476c3e6
    
      12pkgrel=1
    
      13url="https://github.com/ashenfad/$_srcname"
    
      14arch=('any')
    
      15license=('MIT')
    
      16makedepends=(
    
      17  'git'
    
      18  'python-build'
    
      19  'python-installer'
    
      20  'python-wheel'
    
      21)
    
      22depends=(
    
      23  'python'
    
      24  'python-dateutil'
    
      25  'python-sortedcontainers'
    
      26  'python-typing_extensions'
    
      27)
    
      28optdepends=(
    
      29  'python-gcsa: for working with Google Calendar'
    
      30  'python-icalendar: for working with iCalendar'
    
      31  'python-pandas: for converting iterables of Intervals into pandas DataFrames'
    
      32)
    
      33provides=("$_pkgname")
    
      34conflicts=("${provides[@]}")
    
      35options=('!strip')
    
      36source=("git+$url.git")
    
      37sha256sums=('SKIP')
    
      38
    
      39pkgver() {
    
      40  cd "$_srcdir"
    
      41
    
      42  git describe --long --tags \
    
      43  | sed 's/^v//;s/\([^-]*-g\)/r\1/;s/-/./g'
    
      44}
    
      45
    
      46build() {
    
      47  cd "$_srcdir"
    
      48
    
      49  export PYTHONWARNINGS=ignore
    
      50  python -m build --wheel --no-isolation
    
      51}
    
      52
    
      53package() {
    
      54  cd "$_srcdir"
    
      55
    
      56  python -m installer --destdir="$pkgdir" dist/*.whl
    
      57
    
      58  local _site_packages='<VOID>'
    
      59  _site_packages=$(python -c 'import site; print(site.getsitepackages()[0])')
    
      60  rm -rf "$pkgdir$_site_packages/docs"
    
      61
    
      62  install -Dm0644 -t "$pkgdir/usr/share/doc/$pkgname" \
    
      63    ./*.md docs/*.md
    
      64  install -Dm0644 -t "$pkgdir/usr/share/licenses/$pkgname" \
    
      65    LICENSE
    
      66
    
      67  for _dir in doc licenses; do
    
      68    cd "$pkgdir/usr/share/$_dir" || continue
    
      69    ln -srf "$pkgname" "$_pkgname"
    
      70  done
    
      71}
    
      72
    
      73# eof
    
      74

Changes since previous scan

--- PKGBUILD @ 2026-06-18 16:11
+++ PKGBUILD @ 2026-08-03 00:08
@@ -1,18 +1,18 @@
 # shellcheck shell=bash
 # -*- sh -*-
 
-# Maintainer: Klaus Alexander Seiﬆrup <$(echo 0x1fd+d59decfa=40 | tr 0-9+a-f=x ka-i@p-u.l)>
+# Contributor: Klaus Alexander Seiﬆrup <$(echo 0x1fd+d59decfa=40 | tr 0-9+a-f=x ka-i@p-u.l)>
 
 pkgname='python-calgebra-git'
 _pkgname="${pkgname/-git/}"
 _srcname="${_pkgname/python-/}"
 _srcdir="${_srcname}"
 pkgdesc='Python set() operations for calendar intervals (development version)'
-pkgver=0.10.8.r0.gbea36e1
-pkgrel=3
+pkgver=0.10.11.r0.g476c3e6
+pkgrel=1
 url="https://github.com/ashenfad/$_srcname"
 arch=('any')
-license=('MIT')  # SPDX-License-Identifier: MIT
+license=('MIT')
 makedepends=(
   'git'
   'python-build'
@@ -46,6 +46,7 @@
 build() {
   cd "$_srcdir"
 
+  export PYTHONWARNINGS=ignore
   python -m build --wheel --no-isolation
 }
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 17:15:21	MEDIUM	1
2026-07-18 15:58:03	CLEAN	0
2026-06-18 16:11:54	CLEAN	0