python-materialsdb (CLEAN)

Triggered rules

Clean AI review downgraded a static finding llm_review

The static rules flagged this LOW, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it CLEAN (confidence 95%): The package builds from a source tarball hosted on PyPI, which is a trusted Python packaging repository, and installs a Python library with declared dependencies; the low-vote and recent upload are not indicative of malicious intent given the legitimate build process and source.

1 higher static finding superseded - not the current verdict (shown for transparency)

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: Cyril <cyrwae[at]hotmail[dot]com>
    
      2pkgname=python-materialsdb
    
      3_name=python-materialsdb
    
      4pkgver=0.2.0
    
      5pkgrel=1
    
      6pkgdesc="A library to work with materialsdb.org open standard for building materials"
    
      7arch=('any')
    
      8url="https://github.com/CyrilWaechter/python-materialsdb"
    
      9license=('GPL-3.0-or-later')
    
      10depends=('python' 'python-lxml')
    
      11optdepends=(
    
      12    'ifcopenshell: for IFC conversion features'
    
      13)
    
      14makedepends=(
    
      15    python-build
    
      16    python-installer
    
      17    python-wheel
    
      18)
    
      19source=(https://files.pythonhosted.org/packages/source/${_name::1}/${_name//-/_}/${_name//-/_}-$pkgver.tar.gz)
    
      20sha256sums=('3d0d82ca6cf7d61efe950556927ab7536435370396b0006d3ebd2a5a9ca66209')
    
      21build() {
    
      22    cd "${_name//-/_}-$pkgver"
    
      23    python -m build --wheel --no-isolation
    
      24}
    
      25
    
      26package() {
    
      27    cd "${_name//-/_}-$pkgver"
    
      28    python -m installer --destdir="$pkgdir" dist/*.whl
    
      29    install -Dm644 LICENSE.md "$pkgdir"/usr/share/licenses/$pkgname/LICENSE
    
      30}
    
      31

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-10 00:22:44	Clean	2
2026-09-09 23:20:11	Low	1