splatmoji-ekohrt

LOW

maintainer pokemonpasta 0 votes scanned 2026-09-07 17:15:15.263748

View on AUR

Why flagged

The package builds a data file from the project's own source via git and installs it as user-local data; the unverifiable checksum and non-standard install path are quality issues, but the content is non-executable data with no remote code execution risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds a data file from the project's own source via git and installs it as user-local data; the unverifiable checksum and non-standard install path are quality issues, but the content is non-executable data with no remote code execution risk.

PKGBUILD

      1# NOTE: This PKGBUILD writes to ~/.local/share!!! I know this is frowned upon but upstream is archived and even though it says it reads from /usr/share
    
      2#		there's a bug and it just doesn't. If you're not okay with this, don't install.
    
      3
    
      4# Maintainer: pokemonpasta
    
      5_pkgbase=emoticon_kaomoji_dataset
    
      6pkgname=splatmoji-ekohrt
    
      7pkgdesc="Splatmoji-formatted version of ekohrt's kaomoji database"
    
      8pkgver=r10.7d00fbb
    
      9pkgrel=1
    
      10
    
      11arch=(x86_64)
    
      12url="https://github.com/ekohrt/emoticon_kaomoji_dataset"
    
      13license=("unknown")
    
      14depends=(
    
      15	splatmoji
    
      16)
    
      17makedepends=(
    
      18	jq
    
      19)
    
      20
    
      21options=(!strip !debug)
    
      22
    
      23source=("$_pkgbase::git+$url.git")
    
      24sha256sums=('SKIP')
    
      25
    
      26pkgver(){
    
      27	cd "$srcdir/$_pkgbase"
    
      28	printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
    
      29}
    
      30
    
      31package(){
    
      32	cd "$srcdir"
    
      33	# Converts from JSON format of {kaomoji:{original_tags[],new_tags[]}} to splatmoji TSV: kao<tab>key1,key2
    
      34	jq -r 'map_values(.original_tags + .new_tags | join(",")) | to_entries[] | [.key, .value] | @tsv' "$_pkgbase/emoticon_dict.json" > "$pkgname.tsv"
    
      35	
    
      36	install -dm700 "$pkgdir/$HOME"
    
      37	install -Dm644 "$pkgname.tsv"  "$pkgdir/$HOME/.local/share/splatmoji/data/custom/$pkgname.tsv"
    
      38}
    
      39

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-07 17:15:15	Low	2