refurb-git

maintainer vitokiller · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds from a public Git repository of the project itself, which is a normal AUR practice; the 'SKIP' checksum is expected for development versions and not inherently dangerous.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from a public Git repository of the project itself, which is a normal AUR practice; the 'SKIP' checksum is expected for development versions and not inherently dangerous.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# shellcheck shell=bash
    
      2# -*- mode: sh -*-
    
      3
    
      4# Contributor: Klaus Alexander Seiﬆrup <$(echo 0x1fd+d59decfa=40 | tr 0-9+a-f=x ka-i@p-u.l)>
    
      5
    
      6_pkgname='refurb'
    
      7pkgname="$_pkgname-git"
    
      8pkgdesc='A tool for refurbishing and modernizing Python codebases (development version)'
    
      9pkgver=2.3.1.r0.g0dbb127
    
      10pkgrel=2
    
      11url='https://github.com/dosisod/refurb'
    
      12arch=('any')
    
      13license=('GPL-3.0-or-later')
    
      14makedepends=(
    
      15  'git'
    
      16  'python-build'
    
      17  'python-installer'
    
      18  'python-poetry-core'
    
      19  'python-wheel'
    
      20)
    
      21depends=('mypy' 'python')
    
      22provides=("$_pkgname")
    
      23conflicts=("python-$_pkgname" "${provides[@]}")
    
      24replaces=("python-$pkgname")
    
      25options=('!strip')
    
      26source=("$_pkgname::git+$url.git")
    
      27sha256sums=('SKIP')
    
      28
    
      29pkgver() {
    
      30  cd "$_pkgname"
    
      31
    
      32  git describe --long --tags \
    
      33  | sed 's/^v//;s/\([^-]*-g\)/r\1/;s/-/./g'
    
      34}
    
      35
    
      36prepare() {
    
      37  cd "$_pkgname"
    
      38
    
      39  git clean -dfx
    
      40}
    
      41
    
      42build() {
    
      43  cd "$_pkgname"
    
      44
    
      45  export PYTHONWARNINGS=ignore
    
      46  python -m build --wheel --no-isolation
    
      47}
    
      48
    
      49package() {
    
      50  cd "$_pkgname"
    
      51
    
      52  python -m installer --destdir="$pkgdir" dist/*.whl
    
      53
    
      54  install -Dm0644 -t "$pkgdir/usr/share/doc/$pkgname" ./*.md
    
      55
    
      56  # shellcheck disable=SC2043
    
      57  for _dir in doc; do
    
      58    test -d "$pkgdir/usr/share/$_dir" || continue
    
      59    cd "$pkgdir/usr/share/$_dir" && ln -srf "$pkgname" "$_pkgname"
    
      60  done
    
      61}
    
      62
    
      63# eof
    
      64

Changes since previous scan

--- PKGBUILD @ 2026-06-18 16:11
+++ PKGBUILD @ 2026-08-03 00:08
@@ -1,16 +1,16 @@
 # shellcheck shell=bash
 # -*- mode: sh -*-
 
-#  Maintainer: Klaus Alexander Seiﬆrup <$(echo 0x1fd+d59decfa=40 | tr 0-9+a-f=x ka-i@p-u.l)>
+# Contributor: Klaus Alexander Seiﬆrup <$(echo 0x1fd+d59decfa=40 | tr 0-9+a-f=x ka-i@p-u.l)>
 
 _pkgname='refurb'
 pkgname="$_pkgname-git"
 pkgdesc='A tool for refurbishing and modernizing Python codebases (development version)'
 pkgver=2.3.1.r0.g0dbb127
-pkgrel=1
+pkgrel=2
 url='https://github.com/dosisod/refurb'
 arch=('any')
-license=('GPL-3.0-or-later')  # SPDX-License-Identifier: GPL-3.0-or-later
+license=('GPL-3.0-or-later')
 makedepends=(
   'git'
   'python-build'
@@ -42,6 +42,7 @@
 build() {
   cd "$_pkgname"
 
+  export PYTHONWARNINGS=ignore
   python -m build --wheel --no-isolation
 }
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 17:15:21	MEDIUM	1
2026-07-18 15:58:03	CLEAN	0
2026-06-18 16:11:54	CLEAN	0