python-emmet-core

LOW

maintainer harrietobrien 0 votes scanned 2026-09-25 00:03:36.779685

View on AUR

Why flagged

The package builds from a PyPI source tarball, which is normal for Python packages; the low severity is due to the unverifiable checksum (SKIP) and few votes, but PyPI is a trusted source and the package installs only its own code and declared dependencies.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a PyPI source tarball, which is normal for Python packages; the low severity is due to the unverifiable checksum (SKIP) and few votes, but PyPI is a trusted source and the package installs only its own code and declared dependencies.

PKGBUILD

      1# Maintainer: Harriet O'Brien <harrietobrien@protonmail.com>
    
      2
    
      3pkgname=python-emmet-core
    
      4_pkgname=emmet-core
    
      5_pypiname=emmet_core
    
      6pkgver=0.87.2
    
      7pkgrel=1
    
      8pkgdesc="Core data models for the Materials Project emmet data pipeline"
    
      9arch=('any')
    
      10url="https://github.com/materialsproject/emmet"
    
      11license=('custom')
    
      12depends=(
    
      13    'python'
    
      14    'python-monty'
    
      15    'python-pydantic'
    
      16    'python-pydantic-settings'
    
      17    'python-typing_extensions'
    
      18    'python-inflect'
    
      19
    
      20    'python-pymatgen-core'
    
      21)
    
      22optdepends=(
    
      23    'python-pybtex: BibTeX support (install via pip)'
    
      24    'python-blake3: hashing (install via pip)'
    
      25    'python-pubchempy: PubChem lookups (install via pip)'
    
      26    'python-pymatgen-io-validation: I/O validation (install via pip)'
    
      27)
    
      28makedepends=(
    
      29    'python-build'
    
      30    'python-installer'
    
      31    'python-setuptools'
    
      32    'python-setuptools-scm'
    
      33    'python-wheel'
    
      34)
    
      35source=("${_pypiname}-${pkgver}.tar.gz::https://pypi.org/packages/source/${_pkgname::1}/${_pkgname}/${_pypiname}-${pkgver}.tar.gz")
    
      36sha256sums=('SKIP')
    
      37
    
      38build() {
    
      39    cd "${_pypiname}-${pkgver}"
    
      40    /usr/bin/python -m build --wheel --no-isolation
    
      41}
    
      42
    
      43package() {
    
      44    cd "${_pypiname}-${pkgver}"
    
      45    /usr/bin/python -m installer --destdir="${pkgdir}" dist/*.whl
    
      46
    
      47    # License from the emmet monorepo
    
      48    install -dm755 "${pkgdir}/usr/share/licenses/${pkgname}"
    
      49    if [[ -f LICENSE ]]; then
    
      50        install -Dm644 LICENSE -t "${pkgdir}/usr/share/licenses/${pkgname}/"
    
      51    fi
    
      52}
    
      53

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-25 00:03:36	Low	2
2026-09-24 21:44:41	Low	2