python-pyvoy

LOW

maintainer medaminezghal 1 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package builds from source hosted on the project's own GitHub repository; the 'SKIP' checksum for a related git source does not introduce executable risk as it is part of the build process and not a prebuilt binary.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from source hosted on the project's own GitHub repository; the 'SKIP' checksum for a related git source does not introduce executable risk as it is part of the build process and not a prebuilt binary.

PKGBUILD

      1# Maintainer: Mohamed Amine Zghal (medaminezghal) <medaminezghal at outlook dot com>
    
      2
    
      3_name=pyvoy
    
      4pkgname=python-$_name
    
      5pkgver=1.3.0
    
      6pkgrel=1
    
      7pkgdesc='A Python application server implemented in Envoy.'
    
      8arch=('x86_64' 'aarch64')
    
      9url='https://github.com/curioswitch/pyvoy'
    
      10license=('MIT')
    
      11depends=('python'
    
      12         'python-envoy-server'
    
      13         'python-find_libpython'
    
      14         'python-pyqwest'
    
      15         'python-yaml'
    
      16         'python-uvloop'
    
      17         'libgcc'
    
      18         'glibc')
    
      19makedepends=('python-maturin'
    
      20             'python-build'
    
      21             'python-installer'
    
      22             'python-wheel'
    
      23             'clang'
    
      24             'git')
    
      25checkdepends=('python-anyio'
    
      26              'python-pytest'
    
      27              'python-pytest-asyncio'
    
      28              'python-trio'
    
      29              'python-trustme'
    
      30              'python-websockets')
    
      31source=("$_name::git+$url.git#tag=v$pkgver"
    
      32        "kosoku::git+https://github.com/curioswitch/kosoku.git")
    
      33sha256sums=('6a4cbbb61306f23637fc72c5466192d9a41213c51bd5f75ab119d3d591171f4d'
    
      34            'SKIP')
    
      35
    
      36prepare() {
    
      37  cd "$srcdir"/$_name
    
      38  # Tests expect RemoteProtocolError from newer pyqwest, same as upstream fix in curioswitch/pyvoy#322
    
      39  sed -i 's/\bReadError\b/RemoteProtocolError/g' tests/test_kitchensink.py
    
      40  cd "$srcdir"/kosoku
    
      41  git checkout --quiet "$(git tag -l 'v*' --sort=-v:refname | head -1)"
    
      42}
    
      43
    
      44build() {
    
      45  cd "$srcdir"/$_name
    
      46  python -m build --wheel --no-isolation
    
      47  cd "$srcdir"/kosoku
    
      48  python -m build --wheel --no-isolation
    
      49}
    
      50
    
      51check() {
    
      52  local pytest_options=(
    
      53    -vv
    
      54    --disable-warnings
    
      55  )
    
      56  cd "$srcdir"/$_name
    
      57  python -m venv --system-site-packages test-env
    
      58  test-env/bin/python -m installer dist/*.whl
    
      59  test-env/bin/python -m installer "$srcdir"/kosoku/dist/*.whl
    
      60  test-env/bin/python -P -m pytest "${pytest_options[@]}" tests
    
      61}
    
      62
    
      63package() {
    
      64  cd "$srcdir"/$_name
    
      65  python -m installer --destdir="$pkgdir" dist/*.whl
    
      66}
    
      67

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 00:18:51	Low	2
2026-10-11 09:10:29	Low	2