runa-aur

maintainer miroslavbilek · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds from a legitimate source tarball on GitHub, and the flagged 'recently orphaned & re-adopted' status is a metadata concern, not a security risk; the build process installs only the project's own Python wheel and desktop file.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 90%): The package builds from a legitimate source tarball on GitHub, and the flagged 'recently orphaned & re-adopted' status is a metadata concern, not a security risk; the build process installs only the project's own Python wheel and desktop file.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1pkgname=runa-aur
    
      2_pkgname=Runa
    
      3pkgver=0.1.1
    
      4pkgrel=1
    
      5pkgdesc="A graphical AUR package manager for Arch Linux"
    
      6arch=('any')
    
      7url="https://github.com/Rune-Linux/${_pkgname}"
    
      8license=('MIT')
    
      9depends=('python' 'python-gobject' 'gtk3' 'git' 'pacman')
    
      10makedepends=('python-build' 'python-installer' 'python-wheel' 'python-setuptools')
    
      11source=("$pkgname-$pkgver.tar.gz::$url/archive/refs/tags/v$pkgver.tar.gz")
    
      12sha256sums=('2af6bb4f7b592677516ba9ff701c7c44536aafcc1b99af6f0cb7d76a19b1a12b')
    
      13
    
      14build() {
    
      15  cd "$srcdir/${_pkgname}-$pkgver"
    
      16  python -m build --wheel --no-isolation
    
      17}
    
      18
    
      19package() {
    
      20  cd "$srcdir/${_pkgname}-$pkgver"
    
      21
    
      22  python -m installer --destdir="$pkgdir" dist/*.whl
    
      23
    
      24  install -Dm644 data/rune-aur-helper.desktop \
    
      25    "$pkgdir/usr/share/applications/rune-aur-helper.desktop"
    
      26}
    
      27
    
      28

Changes since previous scan

--- PKGBUILD @ 2026-06-18 16:11
+++ PKGBUILD @ 2026-08-03 00:08
@@ -1,6 +1,6 @@
 pkgname=runa-aur
 _pkgname=Runa
-pkgver=0.1.3
+pkgver=0.1.1
 pkgrel=1
 pkgdesc="A graphical AUR package manager for Arch Linux"
 arch=('any')
@@ -9,7 +9,7 @@
 depends=('python' 'python-gobject' 'gtk3' 'git' 'pacman')
 makedepends=('python-build' 'python-installer' 'python-wheel' 'python-setuptools')
 source=("$pkgname-$pkgver.tar.gz::$url/archive/refs/tags/v$pkgver.tar.gz")
-sha256sums=('616a1a511ff7380b058dad0bb24bd29cc02e403c2ce4b2ec673882480692c5fa')
+sha256sums=('2af6bb4f7b592677516ba9ff701c7c44536aafcc1b99af6f0cb7d76a19b1a12b')
 
 build() {
   cd "$srcdir/${_pkgname}-$pkgver"

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 17:15:21	MEDIUM	1
2026-06-18 16:11:54	CLEAN	0