python-globus-sdk

LOW

maintainer lmartinez-mirror 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package builds from the official GitHub source of the project, which is a normal and safe practice for AUR packages; the flagged 'recently orphaned & re-adopted' status does not indicate inherent danger.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from the official GitHub source of the project, which is a normal and safe practice for AUR packages; the flagged 'recently orphaned & re-adopted' status does not indicate inherent danger.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Contributor: Andrew Sun <adsun701@ at mail dot com>
    
      2# Contributor: Aetf <aetf at unlimitedcodeworks dot xyz>
    
      3
    
      4_name=globus_sdk
    
      5pkgname=python-globus-sdk
    
      6pkgver=3.65.0
    
      7pkgrel=1
    
      8pkgdesc="This SDK provides a convenient Pythonic interface to Globus REST APIs, including the Transfer API and the Globus Auth API."
    
      9arch=('any')
    
      10url="https://github.com/globus/globus-sdk-python"
    
      11license=('Apache')
    
      12depends=('python' 'python-cryptography' 'python-six' 'python-requests' 'python-pyjwt' 'python-typing_extensions')
    
      13makedepends=('python-setuptools' 'python-installer' 'python-build')
    
      14source=("${url}/archive/refs/tags/$pkgver.tar.gz")
    
      15sha256sums=('cbb64f9d03085de1b8d82bb0f96a42231d3cb6e1db11435402bfdbc395baa338')
    
      16
    
      17prepare() {
    
      18  cd "${srcdir}/globus-sdk-python-${pkgver}"
    
      19  # don't install tests package
    
      20  sed -sie 's/find_packages()/find_packages(exclude=["tests.*", "tests"])/' setup.py
    
      21}
    
      22
    
      23build() {
    
      24  cd "${srcdir}/globus-sdk-python-${pkgver}"
    
      25  python -m build --wheel --no-isolation
    
      26}
    
      27
    
      28package() {
    
      29  cd "${srcdir}/globus-sdk-python-${pkgver}"
    
      30  python -m installer --destdir="${pkgdir}" dist/*.whl
    
      31}
    
      32

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 21:16:13	Medium	1
2026-06-19 22:34:54	Clean	0