python-swspotify

LOW

maintainer alexkannes222 4 votes scanned 2026-10-27 00:23:28.674093

View on AUR

Why flagged

Package builds from a legitimate project source on GitHub, a common and trusted practice for AUR packages; the orphaned/re-adopted status does not indicate malicious intent or risk.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): Package builds from a legitimate project source on GitHub, a common and trusted practice for AUR packages; the orphaned/re-adopted status does not indicate malicious intent or risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: Soham Sen <aur at sohamsen dot me>
    
      2pkgname=python-swspotify
    
      3_name=SwSpotify
    
      4pkgver=1.2.1
    
      5pkgrel=1
    
      6pkgdesc="Cross-platform library to get the currently playing song and artist from Spotify w/o using the API or the internet. Very fast."
    
      7arch=('any')
    
      8url="https://github.com/SwagLyrics/SwSpotify"
    
      9license=('MIT')
    
      10depends=('python' 'python-flask' 'python-flask-cors' 'python-requests' 'python-dbus')
    
      11checkdepends=('python-pytest' 'python-mock')
    
      12makedepends=('python-setuptools')
    
      13source=("$_name-$pkgver.tar.gz::https://github.com/SwagLyrics/$_name/archive/v$pkgver.tar.gz")
    
      14sha256sums=('67b1565ff704068e3b809c4cd584f1bad8082106b1dd5ffb59208c0fb5d45b38')
    
      15
    
      16build() {
    
      17    cd "$_name-$pkgver"
    
      18    python setup.py build
    
      19}
    
      20
    
      21check() {
    
      22    cd "$_name-$pkgver"
    
      23    pytest tests/test_spotify.py::LinuxTests
    
      24}
    
      25
    
      26package() {
    
      27    cd "$_name-$pkgver"
    
      28    python setup.py install --root="${pkgdir}/" --optimize=1 --skip-build
    
      29    install -Dm644 -t "${pkgdir}/usr/share/licenses/${pkgname}/" LICENSE
    
      30}
    
      31

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-27 00:23:28	Low	2
2026-10-26 21:45:59	Medium	1
2026-06-18 16:11:54	Clean	0