routine

LOW

maintainer wit3k 0 votes scanned 2026-10-27 07:47:02.942332

View on AUR

Why flagged

Package builds from source hosted on the maintainer's GitLab instance, which is not whitelisted but plausibly project-owned; the source is not prebuilt or obfuscated, and the only risk is low due to unverifiable checksum (SKIP) and few votes for a recent upload.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): Package builds from source hosted on the maintainer's GitLab instance, which is not whitelisted but plausibly project-owned; the source is not prebuilt or obfuscated, and the only risk is low due to unverifiable checksum (SKIP) and few votes for a recent upload.

PKGBUILD

      1# Maintainer: Witold Adamus <wit3k@users.noreply.gitlab.gnome.org>
    
      2#
    
      3# Source AUR package: builds client + routine-server from a version tag.
    
      4# Uses git+https (GitLab's /-/archive/ tarballs return 406 to curl/makepkg).
    
      5# If the name `routine` is taken on AUR, publish as `routine-gnome` instead
    
      6# (update pkgname / conflicts / provides accordingly).
    
      7#
    
      8# After each upstream tag: bump pkgver, makepkg --printsrcinfo.
    
      9
    
      10pkgname=routine
    
      11pkgver=0.1.0
    
      12pkgrel=1
    
      13pkgdesc='GNOME time-blocking client with local routine-server'
    
      14url='https://gitlab.gnome.org/wit3k/routine'
    
      15arch=('x86_64')
    
      16license=('GPL-3.0-or-later')
    
      17depends=(
    
      18  'gtk4'
    
      19  'libadwaita'
    
      20  'hicolor-icon-theme'
    
      21)
    
      22makedepends=(
    
      23  'meson'
    
      24  'ninja'
    
      25  'cargo'
    
      26  'rust'
    
      27  'pkgconf'
    
      28  'protobuf'
    
      29  'clang'
    
      30  'git'
    
      31)
    
      32conflicts=('routine-bin')
    
      33install=routine.install
    
      34options=('!lto')
    
      35source=("git+${url}.git#tag=v${pkgver}")
    
      36sha256sums=('SKIP')
    
      37
    
      38build() {
    
      39  arch-meson "$srcdir/$pkgname" build \
    
      40    --buildtype=release \
    
      41    -Dprofile=default \
    
      42    -Dapp-id=io.gitlab.wit3k.Routine
    
      43  meson compile -C build
    
      44}
    
      45
    
      46package() {
    
      47  meson install -C build --destdir "$pkgdir"
    
      48}
    
      49
    
      50# vim: set ts=2 sw=2 et:
    
      51

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-27 07:47:02	Low	2