python-loudify-git

MEDIUM
maintainer dreieck 0 votes scanned 2026-09-05 16:00:23.828148
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:43 "${_pkgname}::git+https://${_githost}/${_gituser}/${_pyname}.git"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: dreieck (https://aur.archlinux.org/account/dreieck)
2
3_pyname="loudify"
4_pkgname="python-${_pyname}"
5pkgname="${_pkgname}-git"
6pkgver=1.0+11.r62.20260403.11be80e
7pkgrel=1
8pkgdesc="LoRa cloudified. This is a python package to run a GNU Radio flow graph in a client <-> broker <-> worker context. The idea behind this project is to get a Centralized Radio Access Network (CRAN) for LoRa."
9arch=('any')
10_githost='github.com'
11_gituser='martynvdijke'
12url="https://${_githost}/${_gituser}/${_pyname}"
13license=("MIT")
14depends=(
15 'python>=3.7'
16 'python-coloredlogs>=15.0.1'
17 'python-pyzmq>=22.1.0'
18)
19makedepends=(
20 'git'
21 'python-build'
22 'python-flit-core>=3.3.0'
23 'python-installer'
24 'python-humanfriendly>=9.2'
25 'python-setuptools>=62.4'
26 'python-setuptools-scm>=6.0.1'
27 'python-toml>=0.10.2'
28 'python-wheel'
29)
30optdepends=()
31checkdepends=()
32provides=(
33 "${_pkgname}=${pkgver}"
34 "${_pyname}=${pkgver}" # It installs a file into `/usr/bin`.
35 "${_pyname}-git=${pkgver}"
36)
37conflicts=(
38 "${_pkgname}"
39 "${_pyname}"
40)
41
42source=(
43 "${_pkgname}::git+https://${_githost}/${_gituser}/${_pyname}.git"
44)
45sha256sums=(
46 'SKIP'
47)
48
49prepare() {
50 cd "${srcdir}/${_pkgname}"
51
52 git log > "${srcdir}/git.log"
53}
54
55pkgver() {
56 cd "${srcdir}/${_pkgname}"
57
58 _ver="$(git describe --tags | sed -E -e 's|^[vV]||' -e 's|\-g[0-9a-f]*$||' | tr '-' '+')"
59 _rev="$(git rev-list --count HEAD)"
60 _date="$(git log -1 --date=format:"%Y%m%d" --format="%ad")"
61 _hash="$(git rev-parse --short HEAD)"
62
63 if [ -z "${_ver}" ]; then
64 error "Version could not be determined."
65 return 1
66 else
67 printf '%s' "${_ver}.r${_rev}.${_date}.${_hash}"
68 fi
69}
70
71build() {
72 cd "${srcdir}/${_pkgname}"
73
74 printf '%s\n' " --> building ..."
75 python -m build --wheel --no-isolation
76}
77
78package() {
79 cd "${srcdir}/${_pkgname}"
80
81 printf '%s\n' " --> installing ..."
82 python -m installer --destdir="$pkgdir" --compile-bytecode=2 dist/*.whl
83
84 _docfiles=(
85 "${srcdir}/git.log"
86 CHANGELOG.md
87 README.md
88 )
89 _docdirs=()
90 _manfiles=()
91 _infofiles=()
92 _licensefiles=(
93 LICENSE
94 )
95 printf '%s\n' " --> installing documentation ..."
96 for _docfile in "${_docfiles[@]}"; do
97 install -D -v -m644 "${_docfile}" "${pkgdir}/usr/share/doc/${_pkgname}/$(basename "${_docfile}")"
98 done
99 for _docdir in "${_docdirs[@]}"; do
100 cp -rv "${_docdir}" "${pkgdir}/usr/share/doc/${_pkgname}/$(basename "${_docdir}")"
101 done
102 for _manfile in "${_manfiles[@]}"; do
103 _section="$(basename "${_manfile}" .gz | sed -E -e 's|^.*\.([^.]*)$|\1|')"
104 install -D -v -m644 "docs/build/man/${_manfile}" "${pkgdir}/usr/share/man/man${_section}/$(basename "${_manfile}")"
105 done
106 for _infofile in "${_infofiles[@]}"; do
107 install -D -v -m644 "${_infofile}" "${pkgdir}/usr/share/info/$(basename "${_infofile}")"
108 done
109 printf '%s\n' " --> installing license ..."
110 for _licensefile in "${_licensefiles[@]}"; do
111 install -D -v -m644 "${_licensefile}" "${pkgdir}/usr/share/licenses/${pkgname}/$(basename "${_licensefile}")"
112 ln -svr "${pkgdir}/usr/share/licenses/${pkgname}/$(basename "${_licensefile}")" "${pkgdir}/usr/share/doc/${_pkgname}/$(basename "${_licensefile}")"
113 done
114}
115

Changes since previous scan

--- PKGBUILD @ 2026-06-20 00:18
+++ PKGBUILD @ 2026-09-05 16:00
@@ -3,7 +3,7 @@
_pyname="loudify"
_pkgname="python-${_pyname}"
pkgname="${_pkgname}-git"
-pkgver=1.0+9.r60.20251217.a1f8148
+pkgver=1.0+11.r62.20260403.11be80e
pkgrel=1
pkgdesc="LoRa cloudified. This is a python package to run a GNU Radio flow graph in a client <-> broker <-> worker context. The idea behind this project is to get a Centralized Radio Access Network (CRAN) for LoRa."
arch=('any')

Scan history

Scanned at (UTC)SeverityRules
2026-09-05 16:00:23 Medium 1
2026-06-20 00:18:46 Clean 2
2026-06-19 23:51:18 Clean 2
2026-06-19 19:07:35 Low 2
2026-06-18 16:11:54 Medium 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion