sep

LOW

maintainer kekmacska 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package builds from a public git repository and applies a patch from a known developer's project; the only concerns are unverifiable sources due to SKIP'd checksums and low popularity, but it does not execute untrusted binaries or exfiltrate data.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a public git repository and applies a patch from a known developer's project; the only concerns are unverifiable sources due to SKIP'd checksums and low popularity, but it does not execute untrusted binaries or exfiltrate data.

PKGBUILD

      1# Maintainer: kekmacska
    
      2
    
      3pkgname=sep
    
      4pkgver=1.4.1.r1.g93b3ac5
    
      5pkgrel=1
    
      6pkgdesc='Python and C library for source extraction and photometry'
    
      7arch=('any')
    
      8license=('MIT, LGPL, BSD')
    
      9url='https://github.com/sep-developers/sep'
    
      10source=("git+$url.git" "sep.1" "https://raw.githubusercontent.com/paolostivanin/stellastack/refs/heads/main/vendor/sep/stellastack-fixes.patch") # since it is mainly meant for stellastack, we vendor their patches and apply them
    
      11makedepends=(cmake make pkgconf git xz)
    
      12provides=($pkgname)
    
      13options=('!zipman')
    
      14sha256sums=('SKIP' '63b41608372b36cebc37cbc00fe9daa707b5ef5f0651d7394d90055646761aaf' 'ff84117efbb7a20f3a1d77e5258e086afbab3c11cf124ddd0bc76d31e3523e84')
    
      15
    
      16pkgver() {
    
      17    cd $pkgname
    
      18
    
      19    git describe --long --tags | sed -r 's/([^-]*-g)/r\1/;s/-/./g;s/v//g'
    
      20}
    
      21
    
      22prepare() {
    
      23    cd $pkgname
    
      24    patch -Np1 -i "$srcdir/stellastack-fixes.patch"
    
      25}
    
      26
    
      27build() {
    
      28    cd $pkgname
    
      29
    
      30    BASE_CFLAGS="-O3 -march=native -mtune=native \
    
      31            -falign-functions=32 -falign-loops=32 \
    
      32            -fno-math-errno -fno-trapping-math \
    
      33            -fno-semantic-interposition \
    
      34            -fomit-frame-pointer -fno-plt \
    
      35            -pipe -flto -Wall -Wno-unused \
    
      36            -fstrict-aliasing -fno-rtti -fno-exceptions \
    
      37            -fmerge-all-constants -ffunction-sections \
    
      38            -fdata-sections -fvisibility=hidden"
    
      39
    
      40    BASE_CXXFLAGS="$BASE_CFLAGS"
    
      41    BASE_LDFLAGS="-Wl,--icf=safe -Wl,--gc-sections -Wl,-O3 -flto -fno-plt"
    
      42
    
      43    # Clang-only flags
    
      44    CLANG_EXTRA_CFLAGS="-fstrict-vtable-pointers -fno-asynchronous-unwind-tables"
    
      45    CLANG_EXTRA_CXXFLAGS="$CLANG_EXTRA_CFLAGS"
    
      46    CLANG_EXTRA_LDFLAGS="-fuse-ld=lld"
    
      47
    
      48    # Detect compiler
    
      49    if command -v clang >/dev/null 2>&1; then
    
      50        export CC=clang
    
      51        export CXX=clang++
    
      52        export CFLAGS="$BASE_CFLAGS $CLANG_EXTRA_CFLAGS"
    
      53        export CXXFLAGS="$BASE_CXXFLAGS $CLANG_EXTRA_CXXFLAGS"
    
      54        export LDFLAGS="$BASE_LDFLAGS $CLANG_EXTRA_LDFLAGS"
    
      55    else
    
      56        export CC=gcc
    
      57        export CXX=g++
    
      58        export CFLAGS="$BASE_CFLAGS"
    
      59        export CXXFLAGS="$BASE_CXXFLAGS"
    
      60        export LDFLAGS="$BASE_LDFLAGS"
    
      61    fi
    
      62
    
      63    cmake -B build -DCMAKE_BUILD_TYPE=Release \
    
      64        -DCMAKE_INSTALL_PREFIX=/usr \
    
      65        -DCMAKE_INSTALL_MANDIR=share/man \
    
      66        -DCMAKE_INSTALL_DATAROOTDIR=share \
    
      67        -DCMAKE_INSTALL_LIBDIR=lib \
    
      68        -DCMAKE_INSTALL_BINDIR=bin \
    
      69        -DBUILD_SHARED_LIBS=ON \
    
      70        -DCMAKE_POLICY_VERSION_MINIMUM=3.5 \
    
      71        -Wno-author
    
      72
    
      73    cmake --build build --parallel "$(nproc)"
    
      74}
    
      75
    
      76check() {
    
      77    cd $pkgname
    
      78    make test
    
      79}
    
      80
    
      81package(){
    
      82    cd "$srcdir/$pkgname"
    
      83
    
      84    DESTDIR="$pkgdir" cmake --install build
    
      85
    
      86    xz -9 -e -c "$srcdir/$pkgname.1" > "$srcdir/$pkgname.1.xz"
    
      87
    
      88    # Install manpage
    
      89    install -Dm644 "$srcdir/$pkgname.1.xz" "$pkgdir/usr/share/man/man1/$pkgname.1.xz" # it is vendored because pkgbuild can't compile it due to python dependency hell
    
      90
    
      91    # Install licenses
    
      92    install -d "$pkgdir/usr/share/licenses/$pkgname"
    
      93    install -Dm644 licenses/* "$pkgdir/usr/share/licenses/$pkgname/"
    
      94}
    
      95

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 00:18:51	Low	2
2026-10-11 00:26:05	Low	2
2026-10-10 00:11:52	Low	2
2026-10-09 16:11:33	Low	2
2026-10-09 12:11:09	Low	2