python-whenever-git
maintainer FabioLolix
· 0 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The package builds from the project's own Git repository, which is a normal AUR practice; the 'SKIP' checksum is expected for -git packages and not inherently dangerous.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from the project's own Git repository, which is a normal AUR practice; the 'SKIP' checksum is expected for -git packages and not inherently dangerous.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
Recently orphaned & re-adopted
orphaned_readopted
This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.
PKGBUILD
1
# shellcheck shell=bash
2
# -*- sh -*-
3
4
# Contributor: Klaus Alexander Seistrup <$(echo 0x1fd+d59decfa=40 | tr 0-9+a-f=x ka-i@p-u.l)>
5
6
pkgname='python-whenever-git'
7
_pkgname="${pkgname/-git/}"
8
_srcname="${_pkgname/python-/}"
9
pkgdesc='Modern datetime library for Python (development version)'
10
pkgver=0.10.3.r0.ga107d67
11
pkgrel=1
12
url="https://github.com/ariebovenberg/$_srcname"
13
arch=('aarch64' 'x86_64')
14
license=('MIT')
15
makedepends=(
16
'git'
17
'python-build'
18
'python-installer'
19
'python-setuptools-rust'
20
'python-wheel'
21
)
22
depends=(
23
'glibc'
24
'libgcc'
25
'python'
26
'python-pydantic-core'
27
)
28
provides=("$_pkgname")
29
conflicts=("${provides[@]}")
30
source=("git+$url.git")
31
sha256sums=('SKIP')
32
33
pkgver() {
34
cd "$_srcname"
35
36
git describe --long --tags | sed 's/^v//;s/\([^-]*-g\)/r\1/;s/-/./g'
37
}
38
39
prepare() {
40
cd "$_srcname"
41
42
git clean -dfx
43
}
44
45
build() {
46
cd "$_srcname"
47
48
export PYTHONWARNINGS=ignore
49
python -m build --wheel --no-isolation
50
}
51
52
package() {
53
cd "$_srcname"
54
55
python -m installer --destdir="$pkgdir" dist/*.whl
56
57
install -Dm0644 -t "$pkgdir/usr/share/doc/$pkgname" \
58
{CHANGELOG,CONTRIBUTING,README}.md
59
install -Dm0644 -t "$pkgdir/usr/share/licenses/$pkgname" \
60
LICENSE
61
62
for _dir in doc licenses; do
63
cd "$pkgdir/usr/share/$_dir" \
64
&& ln -srf "$pkgname" "$_pkgname"
65
done
66
}
67
68
# eof
69
Changes since previous scan
--- PKGBUILD @ 2026-06-18 16:11+++ PKGBUILD @ 2026-08-03 00:08@@ -1,17 +1,17 @@ # shellcheck shell=bash # -*- sh -*- -# Maintainer: Klaus Alexander Seistrup <$(echo 0x1fd+d59decfa=40 | tr 0-9+a-f=x ka-i@p-u.l)>+# Contributor: Klaus Alexander Seistrup <$(echo 0x1fd+d59decfa=40 | tr 0-9+a-f=x ka-i@p-u.l)> pkgname='python-whenever-git' _pkgname="${pkgname/-git/}" _srcname="${_pkgname/python-/}" pkgdesc='Modern datetime library for Python (development version)'-pkgver=0.10.0.r3.g5ccb50f+pkgver=0.10.3.r0.ga107d67 pkgrel=1 url="https://github.com/ariebovenberg/$_srcname" arch=('aarch64' 'x86_64')-license=('MIT') # SPDX-License-Identifier: MIT+license=('MIT') makedepends=( 'git' 'python-build'@@ -45,6 +45,7 @@ build() { cd "$_srcname" + export PYTHONWARNINGS=ignore python -m build --wheel --no-isolation } Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 19:59:04 | MEDIUM | 1 |
| 2026-07-18 15:58:03 | CLEAN | 0 |
| 2026-06-18 16:11:54 | CLEAN | 0 |