python-sqlalchemy-cockroachdb

maintainer orphaned · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads prebuilt CockroachDB binaries from the official binaries.cockroachdb.com domain for testing, which is a legitimate vendor host, not a personal or untrusted file-sharing service, and the checksums are verified, so the risk is low despite the non-whitelisted host.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt CockroachDB binaries from the official binaries.cockroachdb.com domain for testing, which is a legitimate vendor host, not a personal or untrusted file-sharing service, and the checksums are verified, so the risk is low despite the non-whitelisted host.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:12 source_x86_64=("https://binaries.cockroachdb.com/cockroach-v24.3.8.linux-amd64.tgz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Mohamed Amine Zghal (medaminezghal) <medaminezghal at outlook dot com>
    
      2
    
      3_name=sqlalchemy-cockroachdb
    
      4pkgname=python-${_name}
    
      5pkgver=2.0.2
    
      6pkgrel=3
    
      7pkgdesc='CockroachDB dialect for SQLAlchemy.'
    
      8arch=('x86_64' 'aarch64')
    
      9url='https://github.com/cockroachdb/sqlalchemy-cockroachdb'
    
      10license=('Apache-2.0')
    
      11source=("${url}/archive/refs/tags/v${pkgver}.tar.gz")
    
      12source_x86_64=("https://binaries.cockroachdb.com/cockroach-v24.3.8.linux-amd64.tgz")
    
      13source_aarch64=("https://binaries.cockroachdb.com/cockroach-v24.3.8.linux-arm64.tgz")
    
      14sha256sums=('03fbb61ae8230963609da468301c18678889a200f6ffd0f057b57065be8fb99f')
    
      15sha256sums_x86_64=('ebd27dbf7d4713a81aa534b9ba00f89ba970a6d20c37a7a0e73fd139147fa760')
    
      16sha256sums_aarch64=('3fc03415d4f96c36258ccf141b5d6ab0fc3e51e9e670eeb6cf695ad064bfcbbb')
    
      17depends=('python>=3.8' 'python-sqlalchemy')
    
      18makedepends=('python-setuptools' 'python-build' 'python-installer' 'python-wheel')
    
      19checkdepends=('python-alembic' 'python-asyncpg' 'python-mock' 'python-more-itertools' 'python-psycopg' 'python-psycopg2' 'python-pytest' 'python-sqlalchemy')
    
      20
    
      21prepare(){
    
      22  rm -rf cockroachdb
    
      23  if [ -d "cockroach-v24.3.8.linux-amd64" ]; then
    
      24    mv -f cockroach-v24.3.8.linux-amd64 cockroachdb
    
      25  else
    
      26    mv -f cockroach-v24.3.8.linux-arm64 cockroachdb
    
      27  fi
    
      28}
    
      29
    
      30build() {
    
      31  cd "${srcdir}"/${_name}-${pkgver}
    
      32  python -m build --wheel --no-isolation
    
      33}
    
      34
    
      35check() {
    
      36  cd "${srcdir}"/cockroachdb
    
      37  ./cockroach start-single-node --insecure --background || true
    
      38  ./cockroach init --insecure || true
    
      39  ./cockroach sql --insecure -e 'CREATE SCHEMA test_schema; CREATE SCHEMA test_schema_2;' || true
    
      40  local pytest_options=(
    
      41    -vv
    
      42    --override-ini="addopts="
    
      43  )
    
      44  cd "${srcdir}"/${_name}-${pkgver}
    
      45  rm -rf test-env
    
      46  python -m venv --system-site-packages test-env
    
      47  test-env/bin/python -m installer dist/*.whl
    
      48  for db in asyncpg psycopg psycopg2; do
    
      49    rm -rf scratch
    
      50    db_name=$([[ "$db" == "asyncpg" ]] && echo "${db}_async" || echo "$db")
    
      51    pytest_options+=("--deselect" "test/test_suite_sqlalchemy.py::ComponentReflectionTest_cockroachdb+${db_name}_9_5_0::test_get_multi_check_constraints[False-ObjectKind.ANY-ObjectScope.ANY-None-_exclusions_00]")
    
      52    pytest_options+=("--deselect" "test/test_suite_sqlalchemy.py::ComponentReflectionTest_cockroachdb+${db_name}_9_5_0::test_get_multi_check_constraints[False-ObjectKind.ANY-ObjectScope.DEFAULT-None-_exclusions_00]")
    
      53    pytest_options+=("--deselect" "test/test_suite_sqlalchemy.py::ComponentReflectionTest_cockroachdb+${db_name}_9_5_0::test_get_multi_check_constraints[False-ObjectKind.TABLE-ObjectScope.ANY-None-_exclusions_00]")
    
      54    pytest_options+=("--deselect" "test/test_suite_sqlalchemy.py::ComponentReflectionTest_cockroachdb+${db_name}_9_5_0::test_get_multi_check_constraints[False-ObjectKind.TABLE-ObjectScope.DEFAULT-None-_exclusions_00]")
    
      55    pytest_options+=("--deselect" "test/test_suite_sqlalchemy.py::ComponentReflectionTest_cockroachdb+${db_name}_9_5_0::test_get_multi_check_constraints[False-ObjectKind.TABLE|MATERIALIZED_VIEW-ObjectScope.ANY-None-_exclusions_00]")
    
      56    pytest_options+=("--deselect" "test/test_suite_sqlalchemy.py::ComponentReflectionTest_cockroachdb+${db_name}_9_5_0::test_get_multi_check_constraints[False-ObjectKind.TABLE|MATERIALIZED_VIEW-ObjectScope.DEFAULT-None-_exclusions_00]")
    
      57    pytest_options+=("--deselect" "test/test_suite_sqlalchemy.py::ComponentReflectionTest_cockroachdb+${db_name}_9_5_0::test_get_multi_check_constraints[False-ObjectKind.TABLE|VIEW-ObjectScope.ANY-None-_exclusions_00]")
    
      58    pytest_options+=("--deselect" "test/test_suite_sqlalchemy.py::ComponentReflectionTest_cockroachdb+${db_name}_9_5_0::test_get_multi_check_constraints[False-ObjectKind.TABLE|VIEW-ObjectScope.DEFAULT-None-_exclusions_00]")
    
      59    pytest_options+=("--deselect" "test/test_suite_sqlalchemy.py::ComponentReflectionTest_cockroachdb+${db_name}_9_5_0::test_get_multi_check_constraints[True-ObjectKind.ANY-ObjectScope.ANY-None-_exclusions_00]")
    
      60    pytest_options+=("--deselect" "test/test_suite_sqlalchemy.py::ComponentReflectionTest_cockroachdb+${db_name}_9_5_0::test_get_multi_check_constraints[True-ObjectKind.ANY-ObjectScope.DEFAULT-None-_exclusions_00]")
    
      61    pytest_options+=("--deselect" "test/test_suite_sqlalchemy.py::ComponentReflectionTest_cockroachdb+${db_name}_9_5_0::test_get_multi_check_constraints[True-ObjectKind.TABLE-ObjectScope.ANY-None-_exclusions_00]")
    
      62    pytest_options+=("--deselect" "test/test_suite_sqlalchemy.py::ComponentReflectionTest_cockroachdb+${db_name}_9_5_0::test_get_multi_check_constraints[True-ObjectKind.TABLE-ObjectScope.DEFAULT-None-_exclusions_00]")
    
      63    pytest_options+=("--deselect" "test/test_suite_sqlalchemy.py::ComponentReflectionTest_cockroachdb+${db_name}_9_5_0::test_get_multi_check_constraints[True-ObjectKind.TABLE|MATERIALIZED_VIEW-ObjectScope.ANY-None-_exclusions_00]")
    
      64    pytest_options+=("--deselect" "test/test_suite_sqlalchemy.py::ComponentReflectionTest_cockroachdb+${db_name}_9_5_0::test_get_multi_check_constraints[True-ObjectKind.TABLE|MATERIALIZED_VIEW-ObjectScope.DEFAULT-None-_exclusions_00]")
    
      65    pytest_options+=("--deselect" "test/test_suite_sqlalchemy.py::ComponentReflectionTest_cockroachdb+${db_name}_9_5_0::test_get_multi_check_constraints[True-ObjectKind.TABLE|VIEW-ObjectScope.ANY-None-_exclusions_00]")
    
      66    pytest_options+=("--deselect" "test/test_suite_sqlalchemy.py::ComponentReflectionTest_cockroachdb+${db_name}_9_5_0::test_get_multi_check_constraints[True-ObjectKind.TABLE|VIEW-ObjectScope.DEFAULT-None-_exclusions_00]")
    
      67    test-env/bin/python -m pytest "${pytest_options[@]}" test --db="$db"
    
      68  done
    
      69  pkill -f cockroach
    
      70}
    
      71
    
      72package() {
    
      73  cd "${srcdir}"/${_name}-${pkgver}
    
      74  python -m installer --destdir="$pkgdir" dist/*.whl
    
      75}
    
      76

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2