ros2-jazzy-gz-sim-vendor

LOW

maintainer AutoUpdateBot 0 votes scanned 2026-09-05 00:16:27.132014

View on AUR

Why flagged

The package builds from a legitimate project source on GitHub, removes unused vendor dependencies, and installs standard ROS 2 vendor wrapper files; the low severity is due to few votes and recent upload, not malicious content.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package builds from a legitimate project source on GitHub, removes unused vendor dependencies, and installs standard ROS 2 vendor wrapper files; the low severity is due to few votes and recent upload, not malicious content.

PKGBUILD

      1# Maintainer: AutoUpdateBot <auto-update-bot@arch4edu.org>
    
      2
    
      3pkgname=ros2-jazzy-gz-sim-vendor
    
      4pkgver=0.0.13
    
      5pkgrel=1
    
      6pkgdesc="ROS 2 Jazzy vendor wrapper for system gz-sim8"
    
      7arch=('x86_64')
    
      8url="https://github.com/gazebo-release/gz_sim_vendor"
    
      9license=('Apache-2.0')
    
      10depends=(
    
      11    'ros2-jazzy'
    
      12    'ros2-jazzy-gz-msgs-vendor'
    
      13    'ros2-jazzy-gz-transport-vendor'
    
      14    'gz-sim8'
    
      15)
    
      16makedepends=('cmake')
    
      17source=("gz_sim_vendor-$pkgver.tar.gz::https://github.com/gazebo-release/gz_sim_vendor/archive/refs/tags/$pkgver.tar.gz")
    
      18sha256sums=('73a3c159e2bbcd6d12c3b14214e58359605813bbfb1b5ace0e0925447040d329')
    
      19
    
      20prepare() {
    
      21    local _vendor
    
      22    for _vendor in gz_common_vendor gz_fuel_tools_vendor gz_gui_vendor \
    
      23        gz_physics_vendor gz_plugin_vendor gz_rendering_vendor \
    
      24        gz_sensors_vendor gz_tools_vendor sdformat_vendor; do
    
      25        sed -i "/$_vendor/d" \
    
      26            "$srcdir/gz_sim_vendor-$pkgver/package.xml" \
    
      27            "$srcdir/gz_sim_vendor-$pkgver/CMakeLists.txt"
    
      28    done
    
      29}
    
      30
    
      31build() {
    
      32    source /opt/ros/jazzy/setup.bash
    
      33    cmake -B build -S "$srcdir/gz_sim_vendor-$pkgver" \
    
      34        -DCMAKE_BUILD_TYPE='Release' \
    
      35        -DCMAKE_INSTALL_PREFIX='/opt/ros/jazzy' \
    
      36        -DBUILD_TESTING=OFF \
    
      37        -Wno-dev
    
      38    cmake --build build
    
      39}
    
      40
    
      41package() {
    
      42    DESTDIR="$pkgdir" cmake --install build
    
      43    install -Dm644 "$srcdir/gz_sim_vendor-$pkgver/LICENSE" \
    
      44        "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      45}
    
      46

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-05 00:16:27	Low	2
2026-09-04 23:58:52	Low	2