python-keepassxc-cli (CLEAN)

Triggered rules

Clean AI review downgraded a static finding llm_review

The static rules flagged this LOW, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it CLEAN (confidence 95%): The package builds from a source tarball downloaded from PyPI, which is the official and trusted source for Python packages; the flagged low-vote and recent upload are not security risks but metadata concerns.

1 higher static finding superseded - not the current verdict (shown for transparency)

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: Phillip Dykman <phil.d324@gmail.com>
    
      2_name=keepassxc-cli
    
      3pkgname=python-$_name
    
      4# renovate: datasource=pypi depName=keepassxc-cli
    
      5pkgver=3.0.0
    
      6pkgrel=1
    
      7pkgdesc='CLI for KeePassXC using the browser extension protocol with biometric unlock (kpxc-cli)'
    
      8arch=('any')
    
      9url="https://github.com/mietzen/$_name"
    
      10license=('MIT')
    
      11depends=('python' 'python-keepassxc-browser-api' 'python-pyperclip')
    
      12makedepends=('python-build' 'python-installer' 'python-setuptools' 'python-setuptools-scm' 'python-wheel')
    
      13optdepends=('keepassxc: the password manager this talks to')
    
      14source=("https://files.pythonhosted.org/packages/source/${_name::1}/$_name/${_name//-/_}-$pkgver.tar.gz")
    
      15sha256sums=('6635f0d3405d05247b5556e98442462f365185a15fd1311c726802fba8458dfa')
    
      16
    
      17build() {
    
      18  cd "${_name//-/_}-$pkgver"
    
      19  python -m build --wheel --no-isolation
    
      20}
    
      21
    
      22package() {
    
      23  cd "${_name//-/_}-$pkgver"
    
      24  python -m installer --destdir="$pkgdir" dist/*.whl
    
      25  install -Dm644 LICENSE -t "$pkgdir/usr/share/licenses/$pkgname"
    
      26}
    
      27

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-26 00:12:15	Clean	2
2026-09-25 17:12:25	Low	1