python-openmeteo-sdk

LOW

maintainer Dominiquini 1 votes scanned 2026-11-06 00:21:40.447623

View on AUR

Why flagged

The package builds from a source tarball hosted on PyPI, which is a trusted Python packaging repository; the flagged low votes and recent upload are metadata concerns but do not indicate malicious activity.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a source tarball hosted on PyPI, which is a trusted Python packaging repository; the flagged low votes and recent upload are metadata concerns but do not indicate malicious activity.

PKGBUILD

      1# Maintainer: Rafael Dominiquini <rafaeldominiquini at gmail dot com>
    
      2
    
      3_appauthor="open-meteo"
    
      4_appname="openmeteo-sdk"
    
      5
    
      6pkgname="python-${_appname}"
    
      7pkgver=1.30.0
    
      8pkgrel=1
    
      9pkgdesc="Open-Meteo Python SDK"
    
      10
    
      11_pypi_package=${pkgname##python-}
    
      12_pypi_version=${pkgver}
    
      13
    
      14license=('MIT')
    
      15arch=('any')
    
      16
    
      17_url_pypi="https://pypi.org/project/${_pypi_package}/"
    
      18_url_github="https://github.com/${_appauthor}/${_appname}"
    
      19url="${_url_github}"
    
      20
    
      21makedepends=('python-setuptools' 'python-wheel' 'python-build' 'python-installer' 'python-uv-build' 'python-hatchling')
    
      22depends=('python' 'python-flatbuffers')
    
      23
    
      24source=("https://files.pythonhosted.org/packages/source/${_pypi_package::1}/${_pypi_package//-/_}/${_pypi_package//-/_}-${_pypi_version}.tar.gz")
    
      25# source=("${_pypi_package}-${_pypi_version}.tar.gz::${_url_github}/archive/refs/tags/v${_pypi_version}.tar.gz")
    
      26sha256sums=('9b643ce593a557eddc880f8526da9c3700ef96f4388e6f43b5e2cadb6d92cff4')
    
      27
    
      28
    
      29build() {
    
      30    cd "${srcdir}/${_pypi_package//-/_}-${_pypi_version}/"
    
      31
    
      32    python -m build --wheel --no-isolation
    
      33}
    
      34
    
      35package() {
    
      36    cd "${srcdir}/${_pypi_package//-/_}-${_pypi_version}/"
    
      37
    
      38    python -m installer --destdir="${pkgdir}" dist/*.whl
    
      39
    
      40    install -Dm644 "README.md" "${pkgdir}/usr/share/doc/${pkgname}/README.md"
    
      41
    
      42    # install -Dm644 "LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      43}
    
      44

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-06 00:21:40	Low	2
2026-11-06 00:11:05	Low	2