qemu-wtg-git

maintainer dasbd72 · 0 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package builds from a public Git repository with a SKIP'd checksum, but it is a recent, low-vote AUR package that installs only Python scripts and binaries from its own source; no remote code execution or untrusted prebuilt payloads are present.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a public Git repository with a SKIP'd checksum, but it is a recent, low-vote AUR package that installs only Python scripts and binaries from its own source; no remote code execution or untrusted prebuilt payloads are present.

PKGBUILD

1# Maintainer: Sao-Hsuan Lin <twbd723@gmail.com>
2pkgname=qemu-wtg-git
3pkgver=r0.0000000
4pkgrel=1
5pkgdesc="Interactive launcher for a Windows-To-Go USB drive in a QEMU/KVM VM"
6arch=('any')
7url="https://github.com/dasbd72/qemu-wtg"
8license=('MIT')
9depends=('python' 'qemu-desktop' 'edk2-ovmf' 'sudo')
10makedepends=('git')
11provides=('qemu-wtg')
12conflicts=('qemu-wtg')
13source=("$pkgname::git+https://github.com/dasbd72/qemu-wtg.git")
14sha256sums=('SKIP')
15
16pkgver() {
17 cd "$srcdir/$pkgname"
18 printf 'r%s.%s' "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
19}
20
21package() {
22 cd "$srcdir/$pkgname"
23
24 install -Dm755 bin/qemu-wtg "$pkgdir/usr/bin/qemu-wtg"
25
26 install -d "$pkgdir/usr/lib/qemu-wtg"
27 cp -r src/qemu_wtg "$pkgdir/usr/lib/qemu-wtg/qemu_wtg"
28
29 install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
30}
31

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 05:34:42 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion