python-pylnk3

LOW

maintainer leonidlednev 1 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package builds a Python library from a source tarball hosted on the official Python package index (pypi.org via files.pythonhosted.org), which is a trusted source; the flagged 'recently orphaned & re-adopted' status is a metadata concern but does not indicate malicious content.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds a Python library from a source tarball hosted on the official Python package index (pypi.org via files.pythonhosted.org), which is a trusted source; the flagged 'recently orphaned & re-adopted' status is a metadata concern but does not indicate malicious content.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: GI_Jack <GI_Jack@hackermail.com>
    
      2
    
      3pkgname=python-pylnk3
    
      4_pkgname=pylnk3
    
      5pkgver=0.4.3
    
      6pkgrel=2
    
      7pkgdesc="Python library for reading and writing Windows shortcut files (.lnk)."
    
      8url="https://pypi.org/project/pylnk3/"
    
      9arch=('any')
    
      10license=('LGPLv3')
    
      11depends=('python')
    
      12makedepends=('python-build' 'python-installer' 'python-wheel')
    
      13source=("https://files.pythonhosted.org/packages/source/${_pkgname::1}/${_pkgname}/${_pkgname}-${pkgver}.tar.gz")
    
      14sha256sums=('fbc5f512b581382c2a4c11e6df3796f9975bcfd99e3fca2afe531ea61b3c4ac2')
    
      15
    
      16build() {
    
      17    cd "${_pkgname}-${pkgver}"
    
      18    python -m build --wheel --no-isolation
    
      19}
    
      20
    
      21package() {
    
      22    cd "${_pkgname}-${pkgver}"
    
      23    python -m installer --destdir="${pkgdir}" dist/*.whl
    
      24}
    
      25

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 00:18:51	Low	2
2026-10-11 02:16:32	Medium	1
2026-10-11 00:26:05	Low	2
2026-10-10 22:16:18	Medium	1
2026-06-18 16:11:54	Clean	0