svg2oscad-git

maintainer rc.poison · 0 votes · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged The package builds from a publicly accessible Git repository hosted on a personal domain, which is normal for AUR packages; the source is not obfuscated, no remote code execution, and it only installs a Java-based tool with declared dependencies.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a publicly accessible Git repository hosted on a personal domain, which is normal for AUR packages; the source is not obfuscated, no remote code execution, and it only installs a Java-based tool with declared dependencies.

PKGBUILD

      1# Maintainer: myaow at catgirls dot org dot es
    
      2
    
      3_pkgname=svg2oscad
    
      4pkgname=$_pkgname-git
    
      5pkgver=1.0_22_g51adb02
    
      6pkgrel=1
    
      7pkgdesc="Convert SVG files to OpenSCAD paths"
    
      8arch=('any')
    
      9url="https://catgirls.org.es/myaow/svg2oscad"
    
      10license=('custom:Myaow')
    
      11depends=('java-runtime>=21')
    
      12optdepends=('inkscape: SVG export extension')
    
      13makedepends=('maven' 'java-environment>=21' 'git')
    
      14provides=("$_pkgname")
    
      15conflicts=("$_pkgname")
    
      16options=('!strip' '!debug')
    
      17source=("git+$url.git")
    
      18sha256sums=('SKIP')
    
      19
    
      20pkgver() {
    
      21	cd "$srcdir/$_pkgname"
    
      22	git describe --tags --long | sed 's/^v//; s/-/_/g'
    
      23}
    
      24
    
      25build() {
    
      26	cd "$srcdir/$_pkgname"
    
      27	make
    
      28}
    
      29
    
      30package() {
    
      31	cd "$srcdir/$_pkgname"
    
      32	make install-nobuild PREFIX=/usr DESTDIR="$pkgdir"
    
      33	install -Dm644 LICENSE.txt "$pkgdir/usr/share/licenses/$_pkgname/LICENSE.txt"
    
      34}
    
      35

Changes since previous scan

--- PKGBUILD @ 2026-08-15 00:26
+++ PKGBUILD @ 2026-08-18 00:03
@@ -2,7 +2,7 @@
 
 _pkgname=svg2oscad
 pkgname=$_pkgname-git
-pkgver=r92.b9b0430
+pkgver=1.0_22_g51adb02
 pkgrel=1
 pkgdesc="Convert SVG files to OpenSCAD paths"
 arch=('any')
@@ -19,10 +19,7 @@
 
 pkgver() {
 	cd "$srcdir/$_pkgname"
-	local commits short
-	commits="$(git rev-list --count HEAD)"
-	short="$(git rev-parse --short HEAD)"
-	printf 'r%s.%s' "$commits" "$short"
+	git describe --tags --long | sed 's/^v//; s/-/_/g'
 }
 
 build() {

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	2
2026-08-17 00:18:29	LOW	2
2026-08-16 00:03:42	LOW	2
2026-08-15 17:30:51	LOW	2
2026-08-15 00:26:13	LOW	2
2026-08-14 17:29:23	LOW	2