python-pyqwest

LOW

maintainer medaminezghal 1 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package builds from source hosted on the project's official GitHub repository and a related git repository, with a SKIP'd checksum only for the git source which is common and low risk; no remote code execution, obfuscation, or untrusted prebuilt binaries are involved.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from source hosted on the project's official GitHub repository and a related git repository, with a SKIP'd checksum only for the git source which is common and low risk; no remote code execution, obfuscation, or untrusted prebuilt binaries are involved.

PKGBUILD

      1# Maintainer: Mohamed Amine Zghal (medaminezghal) <medaminezghal at outlook dot com>
    
      2
    
      3_name=pyqwest
    
      4pkgname=python-$_name
    
      5pkgver=0.12.0
    
      6pkgrel=2
    
      7pkgdesc='A modern, high-performance HTTP client for Python and Rust.'
    
      8arch=('x86_64' 'aarch64')
    
      9url='https://github.com/curioswitch/pyqwest'
    
      10license=('MIT')
    
      11depends=('python'
    
      12         'python-opentelemetry-api'
    
      13         'zstd'
    
      14         'libgcc'
    
      15         'glibc')
    
      16makedepends=('python-maturin'
    
      17             'python-build'
    
      18             'python-installer'
    
      19             'clang'
    
      20             'git')
    
      21checkdepends=('python-aiohttp'
    
      22              'python-aiodns'
    
      23              'python-anyio'
    
      24              'python-asgiref'
    
      25              'python-brotli'
    
      26              'python-httpx'
    
      27              'python-h2'
    
      28              'python-opentelemetry-test-utils'
    
      29              'python-outcome'
    
      30              'python-pytest'
    
      31              'python-pytest-benchmark'
    
      32              'python-pytest-order'
    
      33              'python-sniffio'
    
      34              'python-trio'
    
      35              'python-trustme'
    
      36              'python-uvloop'
    
      37              'python-envoy-server'
    
      38              'python-find_libpython'
    
      39              'python-yaml')
    
      40options=(!lto)
    
      41source=("$_name-$pkgver.tar.gz::$url/archive/refs/tags/v$pkgver.tar.gz"
    
      42        "pyvoy::git+https://github.com/curioswitch/pyvoy.git")
    
      43sha256sums=('91b211d615c0d2ffeb39ed80cbc035d66fc328e03cf496985ec3c7b99126519c'
    
      44            'SKIP')
    
      45
    
      46prepare() {
    
      47  cd "$srcdir"/$_name-$pkgver
    
      48  # Use the standard library compression.zstd module instead of python-zstd
    
      49  sed -i 's/^import zstd\b.*/from compression import zstd/' tests/apps/asgi/kitchensink.py tests/apps/wsgi/kitchensink.py
    
      50  cd "$srcdir"/pyvoy
    
      51  git checkout --quiet "$(git tag -l 'v*' --sort=-v:refname | head -1)"
    
      52}
    
      53
    
      54build() {
    
      55  cd "$srcdir"/$_name-$pkgver
    
      56  export ZSTD_SYS_USE_PKG_CONFIG=1
    
      57  RUSTFLAGS="$RUSTFLAGS --cfg reqwest_unstable --cfg tokio_unstable" python -m build --wheel --no-isolation
    
      58  cd "$srcdir"/pyvoy
    
      59  python -m build --wheel --no-isolation
    
      60}
    
      61
    
      62check() {
    
      63  local pytest_options=(
    
      64    -vv
    
      65    --disable-warnings
    
      66  )
    
      67  cd "$srcdir"/$_name-$pkgver
    
      68  python -m venv --system-site-packages test-env
    
      69  test-env/bin/python -m installer dist/*.whl
    
      70  test-env/bin/python -m installer "$srcdir"/pyvoy/dist/*.whl
    
      71  cp test-env/lib/python3*/site-packages/$_name/_$_name.*.so $_name/
    
      72  test-env/bin/python -P -m pytest "${pytest_options[@]}" tests
    
      73}
    
      74
    
      75package() {
    
      76  cd "$srcdir"/$_name-$pkgver
    
      77  python -m installer --destdir="$pkgdir" dist/*.whl
    
      78  install -Dm644 LICENSE -t "$pkgdir"/usr/share/licenses/$pkgname/
    
      79}
    
      80

Changes since previous scan

--- PKGBUILD @ 2026-10-15 00:28
+++ PKGBUILD @ 2026-10-17 00:21
@@ -3,17 +3,17 @@
 _name=pyqwest
 pkgname=python-$_name
 pkgver=0.12.0
-pkgrel=1
+pkgrel=2
 pkgdesc='A modern, high-performance HTTP client for Python and Rust.'
 arch=('x86_64' 'aarch64')
 url='https://github.com/curioswitch/pyqwest'
 license=('MIT')
 depends=('python'
          'python-opentelemetry-api'
+         'zstd'
          'libgcc'
          'glibc')
 makedepends=('python-maturin'
-             'python-uv-build'
              'python-build'
              'python-installer'
              'clang'
@@ -34,23 +34,26 @@
               'python-trio'
               'python-trustme'
               'python-uvloop'
-              'python-zstd'
               'python-envoy-server'
               'python-find_libpython'
               'python-yaml')
 options=(!lto)
-source=("$_name::git+$url.git#tag=v$pkgver"
+source=("$_name-$pkgver.tar.gz::$url/archive/refs/tags/v$pkgver.tar.gz"
         "pyvoy::git+https://github.com/curioswitch/pyvoy.git")
-sha256sums=('c137a5ee09086954d34a4d466ac64c61e00548673ed4f80538e47f37a846bdeb'
+sha256sums=('91b211d615c0d2ffeb39ed80cbc035d66fc328e03cf496985ec3c7b99126519c'
             'SKIP')
 
 prepare() {
+  cd "$srcdir"/$_name-$pkgver
+  # Use the standard library compression.zstd module instead of python-zstd
+  sed -i 's/^import zstd\b.*/from compression import zstd/' tests/apps/asgi/kitchensink.py tests/apps/wsgi/kitchensink.py
   cd "$srcdir"/pyvoy
   git checkout --quiet "$(git tag -l 'v*' --sort=-v:refname | head -1)"
 }
 
 build() {
-  cd "$srcdir"/$_name
+  cd "$srcdir"/$_name-$pkgver
+  export ZSTD_SYS_USE_PKG_CONFIG=1
   RUSTFLAGS="$RUSTFLAGS --cfg reqwest_unstable --cfg tokio_unstable" python -m build --wheel --no-isolation
   cd "$srcdir"/pyvoy
   python -m build --wheel --no-isolation
@@ -61,7 +64,7 @@
     -vv
     --disable-warnings
   )
-  cd "$srcdir"/$_name
+  cd "$srcdir"/$_name-$pkgver
   python -m venv --system-site-packages test-env
   test-env/bin/python -m installer dist/*.whl
   test-env/bin/python -m installer "$srcdir"/pyvoy/dist/*.whl
@@ -70,7 +73,8 @@
 }
 
 package() {
-  cd "$srcdir"/$_name
+  cd "$srcdir"/$_name-$pkgver
   python -m installer --destdir="$pkgdir" dist/*.whl
+  install -Dm644 LICENSE -t "$pkgdir"/usr/share/licenses/$pkgname/
 }
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 19:13:05	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 17:17:20	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 00:18:51	Low	2
2026-10-11 07:10:25	Low	2