terraprism-git

LOW

maintainer hosua 0 votes scanned 2026-10-31 13:58:24.770326

View on AUR

Why flagged

The package builds from the project's own git repository, which is normal for -git AUR packages; the low severity is due to few votes and recent upload, not malicious content.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from the project's own git repository, which is normal for -git AUR packages; the low severity is due to few votes and recent upload, not malicious content.

PKGBUILD

      1# Maintainer: hosua <joshortiga777@gmail.com>
    
      2pkgname=terraprism-git
    
      3_pkgname=terraprism
    
      4pkgver=0.13.0.r0.g8acf2ff
    
      5pkgrel=1
    
      6pkgdesc="Terminal UI for viewing Terraform and OpenTofu plans (git version)"
    
      7arch=('x86_64' 'aarch64')
    
      8url="https://github.com/CaptShanks/terraprism"
    
      9license=('AGPL-3.0-or-later')
    
      10depends=('glibc')
    
      11optdepends=('terraform: plan, apply and state modes'
    
      12            'opentofu: plan, apply and state modes with tofu')
    
      13makedepends=('git' 'go')
    
      14provides=("$_pkgname")
    
      15conflicts=("$_pkgname")
    
      16source=("$_pkgname::git+$url.git")
    
      17sha256sums=('SKIP')
    
      18options=('!debug')
    
      19
    
      20pkgver() {
    
      21    cd "$_pkgname"
    
      22    local _desc
    
      23    if _desc=$(git describe --long --tags --abbrev=7 2>/dev/null); then
    
      24        # v0.13.0-4-gabcdef0 -> 0.13.0.r4.gabcdef0 (sorts correctly with vercmp)
    
      25        sed 's/^v//;s/\([^-]*-g\)/r\1/;s/-/./g' <<<"$_desc"
    
      26    else
    
      27        printf 'r%s.%s' "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
    
      28    fi
    
      29}
    
      30
    
      31build() {
    
      32    cd "$_pkgname"
    
      33    export GOFLAGS="-buildmode=pie -trimpath -mod=readonly -modcacherw"
    
      34    # Upstream's version is a const in main.go, so there is no -X main.version to set.
    
      35    go build -o "$_pkgname" ./cmd/terraprism
    
      36}
    
      37
    
      38check() {
    
      39    cd "$_pkgname"
    
      40    go test ./... -short
    
      41}
    
      42
    
      43package() {
    
      44    cd "$_pkgname"
    
      45    install -Dm755 "$_pkgname" "$pkgdir/usr/bin/$_pkgname"
    
      46    install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      47    install -Dm644 README.md "$pkgdir/usr/share/doc/$pkgname/README.md"
    
      48}
    
      49

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-31 13:58:24	Low	2