texlive-emono-git

LOW
maintainer arkades 0 votes scanned 2026-11-01 16:01:05.312492
View on AUR
Why flagged

The package builds monochrome emoji fonts from a GitLab source owned by the maintainer, with no untrusted remote code execution; the low severity is due to few votes and recent upload, but the build process is transparent and uses only project-owned source code.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds monochrome emoji fonts from a GitLab source owned by the maintainer, with no untrusted remote code execution; the low severity is due to few votes and recent upload, but the build process is transparent and uses only project-owned source code.

PKGBUILD

1# Maintainer: Dominik Kummer <admin@arkades.org>
2
3pkgname=texlive-emono-git
4_pkgname=emono
5pkgver=\1.r\2.g\3\n
6pkgrel=1
7pkgdesc='Development version of monochrome emoji fonts for pdfTeX and LaTeX'
8arch=('any')
9url='https://gitlab.com/arkades.org/emono'
10license=('OFL-1.1')
11depends=(
12 'texlive-basic'
13 'texlive-bin'
14 'texlive-latex'
15)
16makedepends=(
17 'git'
18 'python'
19 'python-fonttools'
20 'python-uharfbuzz'
21)
22provides=('texlive-emono')
23conflicts=('texlive-emono')
24install=texlive-emono.install
25source=(
26 "${_pkgname}::git+https://gitlab.com/arkades.org/emono.git#branch=main"
27)
28sha256sums=('SKIP')
29
30pkgver() {
31 cd "${srcdir}/${_pkgname}"
32
33 # Prefer the latest reachable version tag; fall back before the first tag.
34 local version
35 if version=$(git describe --long --abbrev=7 --tags 2>/dev/null); then
36 printf '%s\\n' "${version}" |
37 sed -E 's/^v//; s/([^-]+)-([0-9]+)-g([0-9a-f]+)/\\1.r\\2.g\\3/; s/-/./g'
38 else
39 printf 'r%s.%s\\n' \
40 "$(git rev-list --count HEAD)" \
41 "$(git rev-parse --short=7 HEAD)"
42 fi
43}
44
45build() {
46 cd "${srcdir}/${_pkgname}"
47 python emono.py build --all-weights
48}
49
50package() {
51 cd "${srcdir}/${_pkgname}"
52
53 install -dm755 "${pkgdir}/usr/share/texmf-dist"
54 cp -a build/texmf/. "${pkgdir}/usr/share/texmf-dist/"
55
56 install -dm755 "${pkgdir}/usr/share/licenses/${_pkgname}"
57 if [[ -f OFL.txt ]]; then
58 install -m644 OFL.txt "${pkgdir}/usr/share/licenses/${_pkgname}/OFL.txt"
59 fi
60
61 install -dm755 "${pkgdir}/usr/share/doc/${_pkgname}"
62 for file in README.md GOOGLE_README.txt; do
63 if [[ -f "${file}" ]]; then
64 install -m644 "${file}" "${pkgdir}/usr/share/doc/${_pkgname}/${file}"
65 fi
66 done
67}
68

Scan history

Scanned at (UTC)SeverityRules
2026-11-01 16:01:05 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion