python-django-auth-ldap

maintainer ignacysiciarz · 2 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged Package builds from source hosted on the project's official GitHub repository; the flagged pattern is a procedural AUR history note, not a code or source integrity issue.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): Package builds from source hosted on the project's official GitHub repository; the flagged pattern is a procedural AUR history note, not a code or source integrity issue.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

1# Maintainer: Michał Wojdyła < micwoj9292 at gmail dot com >
2# Contributor: Xavier Corredor <xavier.corredor.llano (a) gmail.com>
3pkgname=python-django-auth-ldap
4_pkgname=django-auth-ldap
5pkgver=5.3.0
6pkgrel=1
7pkgdesc="Django LDAP authentication backend"
8arch=(any)
9url="https://pypi.python.org/pypi/django-auth-ldap"
10license=('LGPL')
11depends=('python' 'python-django' 'python-ldap')
12makedepends=('python-build' 'python-installer' 'python-setuptools-scm' 'python-wheel')
13source=("$pkgname-$pkgver.tar.gz::https://github.com/django-auth-ldap/django-auth-ldap/archive/$pkgver.tar.gz")
14md5sums=('01d472c9cbab1242b97cb7b0bf6781ed')
15
16package() {
17 cd "$_pkgname-$pkgver"
18 export SETUPTOOLS_SCM_PRETEND_VERSION="$pkgver"
19 python -m build --wheel --no-isolation
20 python -m installer --destdir="$pkgdir/" dist/*.whl
21}
22

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 17:15:21 MEDIUM 1
2026-06-18 16:11:54 CLEAN 0

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion