sarbs-surf-git

LOW

maintainer Sergius 0 votes scanned 2026-09-06 15:12:20.220602

View on AUR

Why flagged

Package builds from a legitimate project Git repository with a valid MIT license; the low severity is due to few votes and recent upload, but the source is trustworthy and the build process is standard.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): Package builds from a legitimate project Git repository with a valid MIT license; the low severity is due to few votes and recent upload, but the source is trustworthy and the build process is standard.

PKGBUILD

      1# Maintainer: Sergius <sergius AT sarbs DOT xyz>
    
      2
    
      3_gitname=surf
    
      4pkgname=sarbs-surf-git
    
      5pkgver=2026.09.06.r10.g67169d9
    
      6pkgrel=1
    
      7pkgdesc="Sergi's Build von surf, dem Suckless-Browser (Teil von SARBS)"
    
      8arch=('x86_64')
    
      9url="https://github.com/Sergi-us/surf"
    
      10license=('MIT')
    
      11# glibc: nur aufgenommen, um die namcap-Warnung „implicitly satisfied"
    
      12# ruhigzustellen (libc ist ohnehin Teil des Basissystems).
    
      13depends=('glibc' 'webkit2gtk-4.1' 'gcr' 'gtk3' 'libx11' 'glib2')
    
      14makedepends=('git' 'pkgconf')
    
      15provides=('surf')
    
      16conflicts=('surf')
    
      17source=("git+$url")
    
      18sha256sums=('SKIP')
    
      19
    
      20pkgver() {
    
      21  cd "$_gitname"
    
      22  printf "%s.r%s.g%s" "$(git log -1 --format=%cd --date=format:'%Y.%m.%d')" \
    
      23    "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
    
      24}
    
      25
    
      26prepare() {
    
      27  cd "$_gitname"
    
      28  # Support CFLAGS, LDFLAGS, etc.
    
      29  sed -i 's/^CPPFLAGS =/CPPFLAGS +=/' config.mk
    
      30  # Arch liefert nur noch webkit2gtk-4.1; die API ist für surf kompatibel
    
      31  sed -i 's/webkit2gtk-4\.0/webkit2gtk-4.1/g
    
      32          s/webkit2gtk-web-extension-4\.0/webkit2gtk-web-extension-4.1/g' config.mk
    
      33}
    
      34
    
      35build() {
    
      36  cd "$_gitname"
    
      37  make PREFIX=/usr
    
      38}
    
      39
    
      40package() {
    
      41  cd "$_gitname"
    
      42  make PREFIX=/usr DESTDIR="$pkgdir" install
    
      43  install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      44}
    
      45

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-06 15:12:20	Low	2