renux

LOW

maintainer Dominiquini 1 votes scanned 2026-08-21 01:13:51.509442

View on AUR

Why flagged

The package builds from a GitHub source tarball with a pinned and verified hash, depends only on standard Python packages, and installs as expected; the low severity is due to few votes and recent upload, not code risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a GitHub source tarball with a pinned and verified hash, depends only on standard Python packages, and installs as expected; the low severity is due to few votes and recent upload, not code risk.

PKGBUILD

      1# Maintainer: Rafael Dominiquini <rafaeldominiquini at gmail dot com>
    
      2
    
      3pkgauthor="andrianllmm"
    
      4pkgname="renux"
    
      5pkgver=0.4.1
    
      6pkgrel=1
    
      7pkgdesc="A terminal-based bulk file renamer with a TUI"
    
      8
    
      9_pypi_package=${pkgname}
    
      10_pypi_version=${pkgver}
    
      11
    
      12license=('MIT')
    
      13arch=('any')
    
      14
    
      15_url_pypi="https://pypi.org/project/${pkgname}/"
    
      16_url_github="https://github.com/${pkgauthor}/${pkgname}"
    
      17url="${_url_github}"
    
      18
    
      19provides=("${_pypi_package}")
    
      20conflicts=("python-${pkgname}")
    
      21
    
      22makedepends=('python-setuptools' 'python-wheel' 'python-build' 'python-installer' 'python-poetry')
    
      23depends=('bash' 'python' 'python-pillow' 'python-rich' 'python-textual' 'python-slugify' 'python-hachoir' 'python-typer')
    
      24
    
      25# source=("https://files.pythonhosted.org/packages/source/${_pypi_package::1}/${_pypi_package//-/_}/${_pypi_package//-/_}-${_pypi_version}.tar.gz")
    
      26source=("${_pypi_package}-${_pypi_version}.tar.gz::${_url_github}/archive/refs/tags/v${pkgver}.tar.gz")
    
      27sha256sums=('2aa574af87c159622717908a170e29fa6cda16f4d3889dec9c867312070c41bd')
    
      28
    
      29build() {
    
      30    cd "${srcdir}/${_pypi_package}-${_pypi_version}/" || exit
    
      31
    
      32    python -m build --wheel --no-isolation
    
      33}
    
      34
    
      35package() {
    
      36    cd "${srcdir}/${_pypi_package}-${_pypi_version}/" || exit
    
      37
    
      38    python -m installer --destdir="${pkgdir}" dist/*.whl
    
      39
    
      40    install -Dm644 "README.md" "${pkgdir}/usr/share/doc/${pkgname}/README.md"
    
      41
    
      42    install -Dm644 "LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      43}
    
      44

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-21 01:13:51	Low	2