python-extract-msg

LOW

maintainer RubenKelevra 0 votes scanned 2026-08-26 00:12:07.713121

View on AUR

Why flagged

The package builds from a source tarball on PyPI, which is a standard and trusted practice; the flagged orphan status change does not indicate inherent risk.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from a source tarball on PyPI, which is a standard and trusted practice; the flagged orphan status change does not indicate inherent risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: devome <evinedeng@hotmail.com>
    
      2
    
      3_pkgname=extract-msg
    
      4_pipname="${_pkgname//-/_}"
    
      5pkgname="python-${_pkgname}"
    
      6pkgver=0.54.1
    
      7pkgrel=1
    
      8pkgdesc="Extracts emails and attachments saved in Microsoft Outlook's .msg files"
    
      9arch=("any")
    
      10url="https://github.com/TeamMsgExtractor/msg-extractor"
    
      11license=('MIT')
    
      12depends=(python-beautifulsoup4 python-compressed-rtf python-ebcdic python-olefile python-red-black-tree-mod python-rtfde python-tzlocal)
    
      13makedepends=('python-build' 'python-installer' 'python-setuptools' 'python-wheel')
    
      14source=("${_pkgname}-${pkgver}.tar.gz::https://files.pythonhosted.org/packages/source/${_pipname::1}/${_pipname}/${_pipname}-${pkgver}.tar.gz")
    
      15sha256sums=('fb39e9f0d3971c30ca6ffa5686bc971884f364b6e97c79ccc10013fb3cbd02de')
    
      16
    
      17build() {
    
      18    cd "${_pipname}-${pkgver}"
    
      19    python -m build --wheel --no-isolation
    
      20}
    
      21
    
      22package() {
    
      23    cd "${_pipname}-${pkgver}"
    
      24    python -m installer --destdir="${pkgdir}" dist/*.whl
    
      25    install -Dm644 LICENSE.txt "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      26}
    
      27

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-26 00:12:07	Low	2
2026-08-25 23:28:42	Medium	1
2026-06-18 16:11:54	Clean	0