python-modelscope-hub

maintainer Astro_angelfish · 0 votes · scanned 2026-08-18 00:03:42.021799
LOW
View on AUR ↗
Why flagged The package builds from the official project's GitHub repository, which is a normal AUR practice; the low severity is due to the unverifiable source (SKIP'd checksum) and few votes, but it installs only the project's own code, posing minimal risk.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package builds from the official project's GitHub repository, which is a normal AUR practice; the low severity is due to the unverifiable source (SKIP'd checksum) and few votes, but it installs only the project's own code, posing minimal risk.

PKGBUILD

1# Maintainer: Astro Angelfish <astro_angelfish at qq dot com>
2
3_name=modelscope-hub
4pkgname=python-$_name
5pkgver=0.2.0
6pkgrel=1
7pkgdesc='The official Python client to connect with ModelScope Hub.'
8arch=('any')
9groups=()
10url='https://www.modelscope.cn/'
11license=('Apache')
12depends=('python' 'python-filelock' 'python-requests>=2.28' 'python-setuptools' 'python-tqdm>=4.64.0' 'python-urllib3>=1.26')
13makedepends=('python-pip')
14source=("git+https://github.com/modelscope/modelscope_hub.git#tag=v${pkgver}")
15sha512sums=('SKIP')
16
17package() {
18 cd "${srcdir}/modelscope_hub"
19 make build
20 pip install \
21 --verbose \
22 --disable-pip-version-check \
23 --no-warn-script-location \
24 --ignore-installed \
25 --no-compile \
26 --no-deps \
27 --root="$pkgdir" \
28 --prefix=/usr \
29 dist/*.whl
30}
31
32

Scan history

Scanned at (UTC)SeverityRules
2026-08-18 00:03:42 LOW 2
2026-08-17 00:18:29 LOW 2
2026-08-16 15:32:49 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion