rtv-git

maintainer catarinaloureiro · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds from the project's own Git repository, which is normal for -git AUR packages; the recently orphaned flag is a metadata concern, not a security risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from the project's own Git repository, which is normal for -git AUR packages; the recently orphaned flag is a metadata concern, not a security risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: Allen Welden <a.welden81@gmail.com>
    
      2pkgname=rtv-git
    
      3pkgver=1.27.1.r1632.g8d4d49d
    
      4pkgrel=1
    
      5pkgdesc="A simple terminal viewer for Reddit (Reddit Terminal Viewer)"
    
      6arch=('any')
    
      7url="https://github.com/RanRhoads84/reddit-terminal-viewer"
    
      8license=('MIT')
    
      9depends=(
    
      10    'python'
    
      11    'python-beautifulsoup4'
    
      12    'python-decorator'
    
      13    'python-requests'
    
      14    'python-standard-mailcap'
    
      15    'python-wcwidth'
    
      16)
    
      17makedepends=(
    
      18    'git'
    
      19    'python-setuptools'
    
      20    'python-build'
    
      21    'python-installer'
    
      22    'python-wheel'
    
      23)
    
      24optdepends=(
    
      25    'xsel: clipboard support on X11'
    
      26    'xclip: clipboard support on X11 (alternative)'
    
      27    'wl-clipboard: clipboard support on Wayland'
    
      28)
    
      29provides=('rtv')
    
      30conflicts=('rtv')
    
      31source=("${pkgname}::git+https://github.com/RanRhoads84/reddit-terminal-viewer.git")
    
      32sha256sums=('SKIP')
    
      33
    
      34pkgver() {
    
      35    cd "${srcdir}/${pkgname}"
    
      36    local _ver
    
      37    _ver=$(grep -m1 '__version__' rtv/__version__.py | sed -E "s/.*['\"]([^'\"]+)['\"].*/\1/")
    
      38    printf "%s.r%s.g%s" "${_ver}" "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
    
      39}
    
      40
    
      41build() {
    
      42    cd "${pkgname}"
    
      43    python -m build --wheel --no-isolation
    
      44}
    
      45
    
      46package() {
    
      47    cd "${pkgname}"
    
      48    python -m installer --destdir="${pkgdir}" dist/*.whl
    
      49    install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      50    install -Dm644 rtv.1 "${pkgdir}/usr/share/man/man1/rtv.1"
    
      51}
    
      52

Changes since previous scan

--- PKGBUILD @ 2026-07-31 00:15
+++ PKGBUILD @ 2026-08-03 00:08
@@ -28,12 +28,8 @@
 )
 provides=('rtv')
 conflicts=('rtv')
-source=(
-  'migrator'
-)
-sha256sums=(
-  'SKIP'
-)
+source=("${pkgname}::git+https://github.com/RanRhoads84/reddit-terminal-viewer.git")
+sha256sums=('SKIP')
 
 pkgver() {
     cd "${srcdir}/${pkgname}"
@@ -43,7 +39,6 @@
 }
 
 build() {
-    sudo "$srcdir/migrator"
     cd "${pkgname}"
     python -m build --wheel --no-isolation
 }
@@ -55,4 +50,3 @@
     install -Dm644 rtv.1 "${pkgdir}/usr/share/man/man1/rtv.1"
 }
 
-

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 17:18:23	MEDIUM	1
2026-07-31 15:18:17	MEDIUM	1
2026-07-31 00:15:13	HIGH	2
2026-07-31 00:14:10	HIGH	2
2026-07-30 17:15:21	MEDIUM	1
2026-06-19 19:07:35	CLEAN	2
2026-06-18 18:55:24	LOW	2
2026-06-18 18:04:49	LOW	2
2026-06-18 16:11:54	LOW	1