python-mbedtls

LOW

maintainer orphaned 1 votes scanned 2026-09-27 00:07:07.510666

View on AUR

Why flagged

The package builds from a source tarball hosted on the official Python package index, which is a trusted and appropriate source for Python packages; the orphaned/re-adopted status does not imply malicious intent or risk.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from a source tarball hosted on the official Python package index, which is a trusted and appropriate source for Python packages; the orphaned/re-adopted status does not imply malicious intent or risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: Achmad Fathoni<fathoni.id(at)gmail.com>
    
      2pkgname=python-mbedtls
    
      3pkgver=2.7.1
    
      4pkgrel=1
    
      5pkgdesc="A free cryptographic library for Python that uses mbed TLS for back end."
    
      6arch=(any)
    
      7url="https://pypi.org/project/${pkgname}/"
    
      8license=('MIT')
    
      9makedepends=(python-build python-installer python-wheel cython)
    
      10depends=(mbedtls python python-certifi python-typing-extensions)
    
      11source=(https://files.pythonhosted.org/packages/source/${pkgname::1}/$pkgname/$pkgname-$pkgver.tar.gz)
    
      12sha256sums=('6da1fa8d26a547b53096bb0d55b4f9e1b6d27dec3024c5849441429b522ab05f')
    
      13
    
      14build() {
    
      15    cd ${srcdir}/${pkgname}-${pkgver}
    
      16    python -m build --wheel --no-isolation
    
      17}
    
      18
    
      19package() {
    
      20    cd ${srcdir}/${pkgname}-${pkgver}
    
      21    python -m installer --destdir="$pkgdir" dist/*.whl
    
      22}
    
      23

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-27 00:07:07	Low	2
2026-09-26 11:15:02	Medium	1
2026-06-20 00:35:04	Clean	0