python-pyconcurrent

CLEAN

maintainer GeneArch 0 votes scanned 2026-09-10 00:22:44.768965

View on AUR

Triggered rules

Clean AI review downgraded a static finding llm_review

The static rules flagged this LOW, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it CLEAN (confidence 95%): The package builds from a tagged release of the project's own GitHub repository, which is normal for AUR packages; the source is not executable remote code, and despite SKIP'd checksums and low votes, there is no evidence of malicious behavior or untrusted prebuilt binaries.

1 higher static finding superseded - not the current verdict (shown for transparency)

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# SPDX-License-Identifier: GPL-2.0-or-later
    
      2# SPDX-FileCopyrightText: © 2025-present Gene C <arch@sapience.com>
    
      3#
    
      4# Arch Linux PKGBUILD for pyconcurrent
    
      5# This builds the latest release tag.
    
      6# git HEAD is also well tested.
    
      7#
    
      8# Maintainer: Gene C <arch@sapience.com>
    
      9# Contributor: 
    
      10# 
    
      11pkgname='python-pyconcurrent'
    
      12pkgdesc='Python module to simplify asyncio/multiprocessing'
    
      13_gitname='pyconcurrent'
    
      14
    
      15pkgver="4.0.0"
    
      16pkgrel=1
    
      17url="https://github.com/gene-git/pyconcurrent"
    
      18
    
      19provides=(pyconcurrent=$pkgver)
    
      20conflicts=(pyconcurrent)
    
      21replaces=(pyconcurrent)
    
      22
    
      23
    
      24arch=(any)
    
      25license=(GPL-2.0-or-later)
    
      26
    
      27# To build docs uncommont sphinx/texlive
    
      28depends=(
    
      29    'python>=3.14'
    
      30    'python-dateutil'
    
      31)
    
      32makedepends=(
    
      33    'git' 
    
      34    'meson' 
    
      35    'meson-python' 
    
      36    'rsync' 
    
      37)
    
      38checkdepends=(
    
      39    'python-pytest' 
    
      40    'python-pytest-asyncio'
    
      41)
    
      42# Used by package : mkpkg
    
      43_mkpkg_depends=('python>minor')
    
      44
    
      45#
    
      46# Verifying Signed Tag
    
      47#   Add arch@sapience.com key to keyring then use the source line with "?signed"
    
      48#   Key available via keys/pgp, WKD or dowload from https://www.sapience.com/tech
    
      49#   Note that upstream release procedure requires every tagged release have new tag
    
      50#
    
      51validpgpkeys=( '7CCA1BA66669F3273DB52678E5B81343AB9809E1')   # Gene C
    
      52
    
      53#source=("git+https://github.com/gene-git/${_gitname}#tag=${pkgver}?signed")
    
      54source=("git+https://github.com/gene-git/${_gitname}#tag=${pkgver}")
    
      55sha512sums=('SKIP')
    
      56
    
      57build() {
    
      58    cd "${_gitname}"
    
      59
    
      60    ./scripts/do-build
    
      61}
    
      62
    
      63check() {
    
      64    cd "${_gitname}"
    
      65    ./scripts/run-tests
    
      66}
    
      67
    
      68package() {
    
      69    cd "${_gitname}"
    
      70    ./scripts/do-install ${pkgdir}
    
      71}
    
      72

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-10 00:22:44	Clean	2
2026-09-09 23:20:11	Low	1