tfplantui-git

LOW

maintainer hosua 0 votes scanned 2026-09-01 17:48:51.913915

View on AUR

Why flagged

The package builds from source via Git, uses SKIP for checksums (expected for git sources), and has no remote code execution or untrusted binary downloads; low severity due to few votes and recent upload, but otherwise normal AUR packaging.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from source via Git, uses SKIP for checksums (expected for git sources), and has no remote code execution or untrusted binary downloads; low severity due to few votes and recent upload, but otherwise normal AUR packaging.

PKGBUILD

      1# Maintainer: hosua <joshortiga777@gmail.com>
    
      2pkgname=tfplantui-git
    
      3_pkgname=tfplantui
    
      4pkgver=r3.fc76395
    
      5pkgrel=1
    
      6pkgdesc="Interactive terminal UI for exploring Terraform plans as a dependency graph (git version)"
    
      7arch=('x86_64' 'aarch64')
    
      8url="https://github.com/omarismail/terraform-plan-tui"
    
      9license=('MIT')
    
      10depends=('glibc')
    
      11optdepends=('terraform: open binary .tfplan files directly (runs terraform show -json)'
    
      12            'xclip: clipboard paste support on X11'
    
      13            'wl-clipboard: clipboard paste support on Wayland')
    
      14makedepends=('git' 'go')
    
      15provides=("$_pkgname")
    
      16conflicts=("$_pkgname")
    
      17source=("$_pkgname::git+$url.git")
    
      18sha256sums=('SKIP')
    
      19options=('!debug')
    
      20
    
      21pkgver() {
    
      22    cd "$_pkgname"
    
      23    # 0.1.0.r5.g1a2b3c4 — sorts correctly with vercmp; falls back if no tags
    
      24    local _desc
    
      25    if _desc=$(git describe --long --tags --abbrev=7 2>/dev/null); then
    
      26        printf '%s' "$_desc" | sed 's/^v//;s/\([^-]*-g\)/r\1/;s/-/./g'
    
      27    else
    
      28        printf 'r%s.%s' "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
    
      29    fi
    
      30}
    
      31
    
      32build() {
    
      33    cd "$_pkgname"
    
      34    export GOFLAGS="-buildmode=pie -trimpath -mod=readonly -modcacherw"
    
      35    go build -o "$_pkgname" ./cmd/tfplantui
    
      36}
    
      37
    
      38check() {
    
      39    cd "$_pkgname"
    
      40    go test ./... -short
    
      41}
    
      42
    
      43package() {
    
      44    cd "$_pkgname"
    
      45    install -Dm755 "$_pkgname" "$pkgdir/usr/bin/$_pkgname"
    
      46    install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      47    install -Dm644 README.md "$pkgdir/usr/share/doc/$pkgname/README.md"
    
      48}
    
      49

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-01 17:48:51	Low	2