python-opentelemetry-exporter-prometheus

CLEAN

maintainer Smoolak 0 votes scanned 2026-09-21 00:26:32.109917

View on AUR

Triggered rules

Clean AI review downgraded a static finding llm_review

The static rules flagged this LOW, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it CLEAN (confidence 95%): The package builds from the official OpenTelemetry GitHub repository, uses a verifiable checksum, and follows standard Python packaging practices without executing untrusted remote code or introducing supply-chain risks.

1 higher static finding superseded - not the current verdict (shown for transparency)

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: Smoolak <smoolak@gmail.com>
    
      2
    
      3pkgname=python-opentelemetry-exporter-prometheus
    
      4_distname=opentelemetry-exporter-prometheus
    
      5_release=1.44.0
    
      6pkgver=0.65b0
    
      7pkgrel=1
    
      8pkgdesc='Prometheus metric exporter for OpenTelemetry'
    
      9arch=('any')
    
      10url='https://github.com/open-telemetry/opentelemetry-python'
    
      11license=('Apache-2.0')
    
      12depends=(
    
      13  'python-opentelemetry-api'
    
      14  'python-opentelemetry-sdk'
    
      15  'python-prometheus_client')
    
      16makedepends=(
    
      17  'python-build'
    
      18  'python-hatchling'
    
      19  'python-installer')
    
      20checkdepends=(
    
      21  'python-asgiref'
    
      22  'python-opentelemetry-test-utils'
    
      23  'python-py-cpuinfo'
    
      24  'python-pytest'
    
      25  'python-wrapt')
    
      26source=("$pkgname-$_release.tar.gz::$url/archive/refs/tags/v$_release.tar.gz")
    
      27sha256sums=('928038ad82a20dca5cd31490263faa1c844dde5705a35d895e72518060ca8e12')
    
      28
    
      29build() {
    
      30  cd "opentelemetry-python-$_release/exporter/$_distname"
    
      31  python -m build --wheel --no-isolation
    
      32}
    
      33
    
      34check() {
    
      35  cd "opentelemetry-python-$_release/exporter/$_distname"
    
      36  local _check="$srcdir/check-install"
    
      37  local _site
    
      38  rm -rf "$_check"
    
      39  python -m installer --destdir="$_check" dist/*.whl
    
      40  _site="$(python -c 'import sysconfig; print(sysconfig.get_path("purelib"))')"
    
      41  cd "$srcdir"
    
      42  PYTHONPATH="$_check$_site" python -m pytest -vv --capture=no \
    
      43    --import-mode=importlib \
    
      44    "opentelemetry-python-$_release/exporter/$_distname/tests"
    
      45}
    
      46
    
      47package() {
    
      48  cd "opentelemetry-python-$_release/exporter/$_distname"
    
      49  python -m installer --destdir="$pkgdir" dist/*.whl
    
      50  install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      51}
    
      52

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-21 00:26:32	Clean	2
2026-09-20 23:33:19	Low	1