python-pkb-client (CLEAN)

Triggered rules

Clean AI review downgraded a static finding llm_review

The static rules flagged this LOW, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it CLEAN (confidence 95%): Package builds from the project's own GitHub source, which is normal for AUR packages; the flagged low-vote and recent upload are metadata concerns, not security risks.

1 higher static finding superseded - not the current verdict (shown for transparency)

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: AlphaJack <alphajack at tuta dot io>
    
      2
    
      3pkgname="python-pkb-client"
    
      4pkgver=2.2.0
    
      5pkgrel=1
    
      6pkgdesc="Unofficial client for the Porkbun API"
    
      7arch=("any")
    
      8license=("MIT")
    
      9url="https://github.com/infinityofspace/pkb_client"
    
      10depends=("python-requests" "python-responses" "python-dnspython")
    
      11makedepends=("python-build" "python-installer" "python-setuptools" "python-wheel")
    
      12source=("$url/archive/refs/tags/v$pkgver.tar.gz")
    
      13b2sums=('a5dcb40898ef1712271c4af753e0ffcee3c53e32c6b499da6b8651e10a7ea092357498b33a243f38537263427f7801f9e5a61db6d96befc8e5bd92f7813df19e')
    
      14
    
      15build(){
    
      16 cd "pkb_client-$pkgver"
    
      17 python -m build --wheel --no-isolation
    
      18}
    
      19
    
      20package(){
    
      21 cd "pkb_client-$pkgver"
    
      22 python -m installer --destdir="$pkgdir" dist/*.whl
    
      23 find "$pkgdir/usr/lib" -type d -path "*/site-packages/tests" -exec rm -rf {} +
    
      24}
    
      25

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-02 00:26:00	Clean	2
2026-11-01 22:01:45	Low	1