python-opentimestamps
CLEAN
maintainer AlphaJack
0 votes
scanned 2026-11-02 00:26:00.633185
Triggered rules
Clean
AI review downgraded a static finding
llm_review
The static rules flagged this LOW, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it CLEAN (confidence 95%): The package builds from a source tarball hosted on the project's official GitHub repository, which is a trusted and expected source; the low-vote and recent-upload flags are metadata concerns that do not indicate malicious content.
1 higher static finding superseded - not the current verdict (shown for transparency)
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
PKGBUILD
1
# Maintainer: AlphaJack <alphajack at tuta dot io>
2
3
pkgname="python-opentimestamps"
4
pkgver=0.5.0
5
pkgrel=1
6
pkgdesc="Python3 library for creating and verifying OpenTimestamps proofs"
7
arch=("any")
8
url="https://github.com/opentimestamps/python-opentimestamps"
9
license=("LGPL-3.0-or-later")
10
depends=("python" "python-bitcoinlib" "python-pycryptodomex")
11
optdepends=("python-gitpython: timestamp git commits")
12
makedepends=("python-build" "python-installer" "python-setuptools" "python-wheel")
13
source=("$pkgname-$pkgver.tar.gz::$url/archive/refs/tags/python-opentimestamps-v$pkgver.tar.gz")
14
sha256sums=('71da89eb68cdb0eb67f3ee932b6d743ca14c43648911b04551b04afdbcb1c703')
15
16
build(){
17
cd "python-opentimestamps-python-opentimestamps-v$pkgver"
18
python -m build --wheel --no-isolation
19
}
20
21
package(){
22
cd "python-opentimestamps-python-opentimestamps-v$pkgver"
23
python -m installer --destdir="$pkgdir" dist/*.whl
24
install -D -m 644 "LICENSE" -t "$pkgdir/usr/share/licenses/$pkgname"
25
}
26
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-02 00:26:00 | Clean | 2 |
| 2026-11-01 22:01:45 | Low | 1 |