python-loudify-git
LOW
maintainer dreieck
0 votes
scanned 2026-10-21 00:12:50.227280
Why flagged
The source is a git repository from a project-owned GitHub account, building from source is normal for AUR packages, and the non-whitelisted host is GitHub which is plausibly the project's official host.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a git repository from a project-owned GitHub account, building from source is normal for AUR packages, and the non-whitelisted host is GitHub which is plausibly the project's official host.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:43
"${_pkgname}::git+https://${_githost}/${_gituser}/${_pyname}.git"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: dreieck (https://aur.archlinux.org/account/dreieck)
2
3
_pyname="loudify"
4
_pkgname="python-${_pyname}"
5
pkgname="${_pkgname}-git"
6
pkgver=1.0+11.r62.20260403.11be80e
7
pkgrel=1
8
pkgdesc="LoRa cloudified. This is a python package to run a GNU Radio flow graph in a client <-> broker <-> worker context. The idea behind this project is to get a Centralized Radio Access Network (CRAN) for LoRa."
9
arch=('any')
10
_githost='github.com'
11
_gituser='martynvdijke'
12
url="https://${_githost}/${_gituser}/${_pyname}"
13
license=("MIT")
14
depends=(
15
'python>=3.7'
16
'python-coloredlogs>=15.0.1'
17
'python-pyzmq>=22.1.0'
18
)
19
makedepends=(
20
'git'
21
'python-build'
22
'python-flit-core>=3.3.0'
23
'python-installer'
24
'python-humanfriendly>=9.2'
25
'python-setuptools>=62.4'
26
'python-setuptools-scm>=6.0.1'
27
'python-toml>=0.10.2'
28
'python-wheel'
29
)
30
optdepends=()
31
checkdepends=()
32
provides=(
33
"${_pkgname}=${pkgver}"
34
"${_pyname}=${pkgver}" # It installs a file into `/usr/bin`.
35
"${_pyname}-git=${pkgver}"
36
)
37
conflicts=(
38
"${_pkgname}"
39
"${_pyname}"
40
)
41
42
source=(
43
"${_pkgname}::git+https://${_githost}/${_gituser}/${_pyname}.git"
44
)
45
sha256sums=(
46
'SKIP'
47
)
48
49
prepare() {
50
cd "${srcdir}/${_pkgname}"
51
52
git log > "${srcdir}/git.log"
53
}
54
55
pkgver() {
56
cd "${srcdir}/${_pkgname}"
57
58
_ver="$(git describe --tags | sed -E -e 's|^[vV]||' -e 's|\-g[0-9a-f]*$||' | tr '-' '+')"
59
_rev="$(git rev-list --count HEAD)"
60
_date="$(git log -1 --date=format:"%Y%m%d" --format="%ad")"
61
_hash="$(git rev-parse --short HEAD)"
62
63
if [ -z "${_ver}" ]; then
64
error "Version could not be determined."
65
return 1
66
else
67
printf '%s' "${_ver}.r${_rev}.${_date}.${_hash}"
68
fi
69
}
70
71
build() {
72
cd "${srcdir}/${_pkgname}"
73
74
printf '%s\n' " --> building ..."
75
python -m build --wheel --no-isolation
76
}
77
78
package() {
79
cd "${srcdir}/${_pkgname}"
80
81
printf '%s\n' " --> installing ..."
82
python -m installer --destdir="$pkgdir" --compile-bytecode=2 dist/*.whl
83
84
_docfiles=(
85
"${srcdir}/git.log"
86
CHANGELOG.md
87
README.md
88
)
89
_docdirs=()
90
_manfiles=()
91
_infofiles=()
92
_licensefiles=(
93
LICENSE
94
)
95
printf '%s\n' " --> installing documentation ..."
96
for _docfile in "${_docfiles[@]}"; do
97
install -D -v -m644 "${_docfile}" "${pkgdir}/usr/share/doc/${_pkgname}/$(basename "${_docfile}")"
98
done
99
for _docdir in "${_docdirs[@]}"; do
100
cp -rv "${_docdir}" "${pkgdir}/usr/share/doc/${_pkgname}/$(basename "${_docdir}")"
101
done
102
for _manfile in "${_manfiles[@]}"; do
103
_section="$(basename "${_manfile}" .gz | sed -E -e 's|^.*\.([^.]*)$|\1|')"
104
install -D -v -m644 "docs/build/man/${_manfile}" "${pkgdir}/usr/share/man/man${_section}/$(basename "${_manfile}")"
105
done
106
for _infofile in "${_infofiles[@]}"; do
107
install -D -v -m644 "${_infofile}" "${pkgdir}/usr/share/info/$(basename "${_infofile}")"
108
done
109
printf '%s\n' " --> installing license ..."
110
for _licensefile in "${_licensefiles[@]}"; do
111
install -D -v -m644 "${_licensefile}" "${pkgdir}/usr/share/licenses/${pkgname}/$(basename "${_licensefile}")"
112
ln -svr "${pkgdir}/usr/share/licenses/${pkgname}/$(basename "${_licensefile}")" "${pkgdir}/usr/share/doc/${_pkgname}/$(basename "${_licensefile}")"
113
done
114
}
115
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |
| 2026-10-12 00:18:51 | Low | 2 |
| 2026-10-11 00:26:05 | Low | 2 |
| 2026-10-10 00:11:52 | Low | 2 |
| 2026-10-09 00:05:33 | Low | 2 |
| 2026-10-08 00:28:03 | Low | 2 |
| 2026-10-07 00:21:34 | Low | 2 |
| 2026-10-06 00:13:36 | Low | 2 |
| 2026-10-05 00:08:03 | Low | 2 |
| 2026-10-04 00:18:08 | Low | 2 |
| 2026-10-03 00:23:04 | Low | 2 |
| 2026-10-02 00:00:32 | Low | 2 |