skalibs-git (CLEAN)

Triggered rules

Clean AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it CLEAN (confidence 95%): The source uses a git repository from the project's official domain, which is a legitimate and expected source; building from official upstream git is normal for -git AUR packages and poses no additional risk.

2 higher static findings superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:22 source=("$pkgname::git+git://git.skarnet.org/skalibs")

Medium Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: aksr <aksr at t-com dot me>
    
      2pkgname=skalibs-git
    
      3pkgver=2.3.10.0.r5.g70697ef
    
      4pkgrel=1
    
      5epoch=
    
      6pkgdesc="A general-purpose low-level C library."
    
      7arch=('i686' 'x86_64')
    
      8url="http://www.skarnet.org/software/skalibs/"
    
      9license=('ISC')
    
      10groups=()
    
      11depends=('')
    
      12makedepends=('git')
    
      13optdepends=()
    
      14checkdepends=()
    
      15provides=('skalibs')
    
      16conflicts=('skalibs')
    
      17replaces=()
    
      18backup=()
    
      19options=()
    
      20changelog=
    
      21install=
    
      22source=("$pkgname::git+git://git.skarnet.org/skalibs")
    
      23noextract=()
    
      24md5sums=('SKIP')
    
      25
    
      26pkgver() {
    
      27  cd "$srcdir/$pkgname"
    
      28  git describe --long | sed -E 's/([^-]*-g)/r\1/;s/-/./g;s/^v//'
    
      29}
    
      30
    
      31build() {
    
      32  cd "$srcdir/$pkgname"
    
      33  ./configure --prefix=/usr --datadir=/etc
    
      34  make
    
      35}
    
      36
    
      37package() {
    
      38  cd "$srcdir/$pkgname"
    
      39  make DESTDIR="$pkgdir/" install
    
      40  install -Dm644 COPYING $pkgdir/usr/share/licenses/$pkgname/COPYING
    
      41}
    
      42
    
      43

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-19 00:03:55	Clean	3
2026-10-18 23:23:07	Medium	2
2026-06-19 23:51:18	Clean	2
2026-06-18 16:11:54	Medium	1