python-libretranslate-git

maintainer francescogiunti · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds from the project's own GitHub repository, which is normal for AUR packages; the 'recently orphaned & re-adopted' flag is administrative and does not indicate malicious activity.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from the project's own GitHub repository, which is normal for AUR packages; the 'recently orphaned & re-adopted' flag is administrative and does not indicate malicious activity.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Contributor: vantu5z <vantu5z@mail.ru>
    
      2
    
      3pkgname=python-libretranslate-git
    
      4pkgver=r51.20250302
    
      5pkgrel=1
    
      6pkgdesc="Python bindings for LibreTranslate"
    
      7url="https://github.com/argosopentech/LibreTranslate-py"
    
      8depends=('python')
    
      9makedepends=('git' 'python-build' 'python-installer' 'python-wheel' 'python-setuptools')
    
      10license=('MIT')
    
      11arch=('any')
    
      12provides=("${pkgname%-git}")
    
      13conflicts=("${pkgname%-git}")
    
      14source=(${pkgname}::"git+https://github.com/argosopentech/LibreTranslate-py.git")
    
      15sha256sums=('SKIP')
    
      16
    
      17pkgver() {
    
      18    cd $pkgname
    
      19    # get number of last git commit
    
      20    _commitCount=$(git rev-list --count HEAD)
    
      21    # get time of last git commit
    
      22    _commitTime=$(git show -s --format="%ci" | grep -o "....-..-.." | sed "s/-//g")
    
      23    # add "r*.*" from package version
    
      24    echo "r$_commitCount.$_commitTime"
    
      25}
    
      26
    
      27build() {
    
      28    cd "${srcdir}/${pkgname}"
    
      29    python -m build --wheel --no-isolation
    
      30}
    
      31
    
      32package() {
    
      33    cd "${srcdir}/${pkgname}"
    
      34    python -m installer --destdir="$pkgdir" dist/*.whl
    
      35    install -Dm0644 -t "$pkgdir/usr/share/licenses/$pkgname/" LICENSE
    
      36}
    
      37

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 17:15:21	MEDIUM	1
2026-06-19 22:34:54	CLEAN	0