python-rtfde

LOW

maintainer RubenKelevra 0 votes scanned 2026-08-26 00:12:07.713121

View on AUR

Why flagged

The package builds from a source tarball hosted on the project's own GitHub repository; the flagged pattern is administrative (recently orphaned and re-adopted), but the source is verifiable and the build process is standard for Python packages.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from a source tarball hosted on the project's own GitHub repository; the flagged pattern is administrative (recently orphaned and re-adopted), but the source is verifiable and the build process is standard for Python packages.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: devome <evinedeng@hotmail.com>
    
      2
    
      3_pkgname=rtfde
    
      4_pipname="${_pkgname^^}"
    
      5pkgname="python-${_pkgname}"
    
      6pkgver=0.1.2
    
      7pkgrel=1
    
      8pkgdesc="A library for extracting HTML content from RTF encapsulated HTML as commonly found in the exchange MSG email format."
    
      9arch=("any")
    
      10url="https://github.com/seamustuohy/${_pipname}"
    
      11license=('LGPL-3.0-or-later')
    
      12depends=("python-lark" "python-oletools")
    
      13makedepends=('python-build' 'python-installer' 'python-setuptools' 'python-wheel')
    
      14source=("${_pkgname}-${pkgver}.tar.gz::${url}/archive/refs/tags/${pkgver}.tar.gz")
    
      15sha256sums=('e7e65410b10b9d61be3d96b2cd5a7bc88d21ea75d519296925a0cb9631b50d73')
    
      16
    
      17build() {
    
      18    cd "${_pipname}-${pkgver}"
    
      19    python -m build --wheel --no-isolation
    
      20}
    
      21
    
      22package() {
    
      23    cd "${_pipname}-${pkgver}"
    
      24    python -m installer --destdir="${pkgdir}" dist/*.whl
    
      25}
    
      26

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-26 00:12:07	Low	2
2026-08-25 23:28:42	Medium	1
2026-06-18 16:11:54	Clean	0