r-savvy-cli
LOW
maintainer Yousa-Mirage
0 votes
scanned 2026-09-21 09:34:45.899251
Why flagged
The package builds from the project's own source via git tag, which is normal for AUR; the 'SKIP' checksum is expected for git sources, and no untrusted executables are downloaded or executed.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from the project's own source via git tag, which is normal for AUR; the 'SKIP' checksum is expected for git sources, and no untrusted executables are downloaded or executed.
PKGBUILD
1
# Maintainer: Yousa-Mirage <Yousa-Mirage@foxmail.com>
2
3
pkgname=r-savvy-cli
4
pkgver=0.11.0
5
pkgrel=1
6
pkgdesc='CLI for the savvy framework for building R packages with Rust'
7
arch=('x86_64' 'aarch64')
8
url='https://github.com/yutannihilation/savvy'
9
license=('MIT')
10
11
depends=(
12
'gcc-libs'
13
'glibc'
14
)
15
16
makedepends=(
17
'cargo'
18
'git'
19
)
20
21
conflicts=(
22
'r-savvy-cli-bin'
23
)
24
25
source=(
26
"savvy::git+https://github.com/yutannihilation/savvy.git#tag=v${pkgver}"
27
)
28
29
sha256sums=(
30
'SKIP'
31
)
32
33
prepare() {
34
cd "$srcdir/savvy"
35
36
export RUSTUP_TOOLCHAIN=stable
37
export CARGO_TARGET_DIR=target
38
39
cargo fetch --locked
40
}
41
42
build() {
43
cd "$srcdir/savvy"
44
45
export RUSTUP_TOOLCHAIN=stable
46
export CARGO_TARGET_DIR=target
47
48
cargo build \
49
--frozen \
50
--release \
51
--package savvy-cli
52
}
53
54
package() {
55
cd "$srcdir/savvy"
56
57
install -Dm755 \
58
target/release/savvy-cli \
59
"$pkgdir/usr/bin/savvy-cli"
60
61
install -Dm644 \
62
LICENSE.md \
63
"$pkgdir/usr/share/licenses/$pkgname/LICENSE.md"
64
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-21 09:34:45 | Low | 2 |