python-pymatgen-core

LOW

maintainer harrietobrien 0 votes scanned 2026-09-25 00:03:36.779685

View on AUR

Why flagged

The package builds from a PyPI source tarball with a skipped checksum, but it is a standard Python package build using trusted tools and dependencies; the core risk is limited to unverified source integrity, not active malice or remote code execution.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a PyPI source tarball with a skipped checksum, but it is a standard Python package build using trusted tools and dependencies; the core risk is limited to unverified source integrity, not active malice or remote code execution.

PKGBUILD

      1# Maintainer: Harriet O'Brien <harrietobrien@protonmail.com>
    
      2
    
      3pkgname=python-pymatgen-core
    
      4_pkgname=pymatgen-core
    
      5_pypiname=pymatgen_core
    
      6pkgver=2026.9.23
    
      7pkgrel=1
    
      8pkgdesc="Core modules of the Python Materials Genomics library for materials analysis"
    
      9arch=('x86_64')
    
      10url="https://github.com/materialsproject/pymatgen-core"
    
      11license=('MIT')
    
      12depends=(
    
      13    'python'
    
      14    'python-monty'
    
      15    'python-numpy'
    
      16    'python-scipy'
    
      17    'python-matplotlib'
    
      18    'python-sympy'
    
      19    'python-pandas'
    
      20    'python-networkx'
    
      21    'python-requests'
    
      22    'python-tabulate'
    
      23    'python-tqdm'
    
      24    'python-uncertainties'
    
      25    'python-plotly'
    
      26    'python-lxml'
    
      27    'python-orjson'
    
      28    'python-joblib'
    
      29    'python-bibtexparser'
    
      30
    
      31)
    
      32optdepends=(
    
      33    'python-spglib: space group analysis (install via pip)'
    
      34    'python-palettable: color palettes (install via pip)'
    
      35)
    
      36makedepends=(
    
      37    'python-build'
    
      38    'python-installer'
    
      39    'python-setuptools'
    
      40    'python-setuptools-scm'
    
      41    'python-wheel'
    
      42    'cython'
    
      43    'python-numpy'
    
      44)
    
      45source=("${_pypiname}-${pkgver}.tar.gz::https://pypi.org/packages/source/${_pkgname::1}/${_pkgname}/${_pypiname}-${pkgver}.tar.gz")
    
      46sha256sums=('SKIP')
    
      47
    
      48build() {
    
      49    cd "${_pypiname}-${pkgver}"
    
      50    /usr/bin/python -m build --wheel --no-isolation
    
      51}
    
      52
    
      53package() {
    
      54    cd "${_pypiname}-${pkgver}"
    
      55    /usr/bin/python -m installer --destdir="${pkgdir}" dist/*.whl
    
      56    install -Dm644 LICENSE -t "${pkgdir}/usr/share/licenses/${pkgname}/"
    
      57}
    
      58

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-25 00:03:36	Low	2
2026-09-24 21:44:41	Low	2