python-scad123d-git

LOW

maintainer dcelasun 0 votes scanned 2026-10-27 09:47:05.186512

View on AUR

Why flagged

The package builds from a public Git repository with a SKIP'd checksum, but it is a legitimate source for a git package; the low severity is due to few votes and recent upload, not malicious content.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a public Git repository with a SKIP'd checksum, but it is a legitimate source for a git package; the low severity is due to few votes and recent upload, not malicious content.

PKGBUILD

      1# Maintainer: D. Can Celasun <can[at]dcc[dot]im>
    
      2
    
      3pkgname=python-scad123d-git
    
      4_pkgname=scad123d
    
      5pkgver=0.9.0.r0.g611f524
    
      6pkgrel=1
    
      7pkgdesc="Import OpenSCAD files as native build123d BRep geometry, via OpenSCAD's flattened CSG export (latest git version)"
    
      8arch=('any')
    
      9url="https://github.com/etjones/scad123d"
    
      10license=('MIT AND OFL-1.1')
    
      11# build123d 0.13 needs OCCT 8, so this can't be installed until
    
      12# python-build123d and python-ocp catch up in the AUR
    
      13depends=(
    
      14  'openscad'
    
      15  'python'
    
      16  'python-build123d>=0.13.0'
    
      17  'python-fonttools'
    
      18  'python-lark-parser'
    
      19  'python-numpy'
    
      20  'python-ocp'
    
      21  'python-scipy'
    
      22  'python-webcolors'
    
      23)
    
      24makedepends=('git' 'python-build' 'python-installer' 'python-wheel' 'python-hatchling')
    
      25checkdepends=('python-pytest' 'python-psutil' 'python-rich')
    
      26optdepends=(
    
      27  'scad2step: scad2step command'
    
      28  'python-psutil: scad123d-batch'
    
      29  'python-rich: scad123d-batch'
    
      30)
    
      31provides=("python-${_pkgname}")
    
      32conflicts=("python-${_pkgname}")
    
      33source=("git+${url}.git")
    
      34sha256sums=('SKIP')
    
      35
    
      36pkgver() {
    
      37  cd "${_pkgname}"
    
      38  git describe --long --tags | sed 's/^v//;s/\([^-]*-g\)/r\1/;s/-/./g'
    
      39}
    
      40
    
      41build() {
    
      42  cd "${_pkgname}"
    
      43  python -m build --wheel --no-isolation
    
      44}
    
      45
    
      46check() {
    
      47  cd "${_pkgname}"
    
      48  rm -rf test-env
    
      49  python -m installer --destdir=test-env dist/*.whl
    
      50  local _site_packages=$(python -c "import site; print(site.getsitepackages()[0])")
    
      51  # Same tier as upstream CI: the differential tests need a specific OpenSCAD
    
      52  PYTHONPATH="${PWD}/test-env/${_site_packages}" pytest -m "not needs_openscad"
    
      53}
    
      54
    
      55package() {
    
      56  cd "${_pkgname}"
    
      57  python -m installer --destdir="${pkgdir}" dist/*.whl
    
      58
    
      59  # Owned by the scad2step package, which is the same entry point
    
      60  rm "${pkgdir}/usr/bin/scad2step"
    
      61
    
      62  install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      63  install -Dm644 src/solid123d/_fonts/LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE.LiberationSans"
    
      64}
    
      65

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-27 09:47:05	Low	2