semver-cpp-git

maintainer orphaned · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds from the project's own Git repository, which is a normal AUR practice; the recent orphan re-adoption is a procedural flag with no inherent security risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from the project's own Git repository, which is a normal AUR practice; the recent orphan re-adoption is a procedural flag with no inherent security risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Ruijie Yu (first.last@outlook.com)
    
      2pkgname=semver-cpp-git
    
      3_pkgname=${pkgname%-git}
    
      4pkgver=0.2.2.r18.ge804882
    
      5pkgrel=1
    
      6pkgdesc='Semantic Versioning for modern C++'
    
      7url="https://github.com/Neargye/semver"
    
      8arch=(any)
    
      9license=(MIT)
    
      10depends=()
    
      11optdepends=(
    
      12'gcc: c++ compiler'
    
      13'clang: c++ compiler'
    
      14)
    
      15makedepends=(git cmake make)
    
      16provides=("${_pkgname}")
    
      17conflicts=("${_pkgname}")
    
      18source=(
    
      19"$_pkgname::git+$url.git#branch=master"
    
      20)
    
      21sha512sums=(SKIP)
    
      22_cmake_config=Release
    
      23
    
      24prepare() {
    
      25    cd "${srcdir}/${_pkgname}"
    
      26    cmake \
    
      27        --warn-uninitialized \
    
      28        --warn-unused-vars \
    
      29        -S . -B build
    
      30}
    
      31
    
      32build() {
    
      33    cmake \
    
      34        --build "${srcdir}/${_pkgname}/build" \
    
      35        --config "$_cmake_config" \
    
      36        -j
    
      37}
    
      38
    
      39check() {
    
      40    cd "${srcdir}/${_pkgname}/build"
    
      41    ctest \
    
      42        --no-tests=ignore \
    
      43        --output-on-failure \
    
      44        --progress
    
      45}
    
      46
    
      47pkgver() {
    
      48    cd "${srcdir}/${_pkgname}"
    
      49    local _version="$(git describe --tags --match 'v*' | sed s/-/.r/ | sed s/-/./)"
    
      50    echo "${_version#v}"
    
      51}
    
      52
    
      53package() {
    
      54    cmake \
    
      55        --install "${srcdir}/${_pkgname}/build" \
    
      56        --prefix "${pkgdir}/usr/" \
    
      57        --config "$_cmake_config"
    
      58}
    
      59
    
      60

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 21:31:00	MEDIUM	1
2026-06-18 16:11:54	CLEAN	0