tio-fork-jetm
LOW
maintainer jetm
0 votes
scanned 2026-09-23 21:40:52.517030
Why flagged
The package builds from a pinned commit of a publicly accessible fork on GitHub, which is a normal AUR practice; the source is transparent and verifiable despite the skipped checksum, and it installs only compiled code from that source.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a pinned commit of a publicly accessible fork on GitHub, which is a normal AUR practice; the source is transparent and verifiable despite the skipped checksum, and it installs only compiled code from that source.
PKGBUILD
1
# Maintainer: Javier Tia <floss@jetm.me>
2
3
# tio from my fork, github.com/jetm/tio, which adds a socket client for unix:,
4
# inet: and inet6: targets and RFC 2217 on both ends of the socket. Upstream
5
# tio/tio has stopped merging, so the fork's master is the maintained line.
6
#
7
# Built from a pinned commit rather than the branch head, so a given pkgver
8
# always names the same source. To ship a new fork commit, set _commit to it and
9
# pkgver to what `git describe --long --tags` reports there (dashes folded into
10
# the r-count form), then regenerate .SRCINFO.
11
#
12
# Upstream releases are tracked by nvchecker, but never auto-bumped: a new tio
13
# release has to be merged into the fork first. CI opens an issue instead; see
14
# the tio-fork-jetm exemption in .github/workflows/update.yml.
15
#
16
# It conflicts with and provides `tio`, so it replaces the distro package and
17
# anything depending on tio stays satisfied.
18
19
pkgname=tio-fork-jetm
20
pkgver=3.9.r100.ga068040
21
pkgrel=1
22
_commit=a068040d39d057ec368d5d2bd71e868fc6b88c0e
23
pkgdesc='Serial device I/O tool - fork with socket client mode and RFC 2217'
24
arch=('x86_64')
25
url='https://github.com/jetm/tio'
26
license=('GPL-2.0-or-later')
27
depends=('glib2' 'lua')
28
# bash-completion is deliberately absent. tio's meson treats it as optional and
29
# simply skips installing the completion when the dependency is not found.
30
makedepends=('git' 'meson' 'pkgconf')
31
provides=("tio=${pkgver%%.r*}")
32
conflicts=('tio')
33
34
source=("tio::git+https://github.com/jetm/tio.git#commit=${_commit}")
35
sha256sums=('SKIP')
36
37
build() {
38
arch-meson tio build
39
meson compile -C build
40
}
41
42
check() {
43
# tio ships no test suite. The binary reporting the revision it was built
44
# from is what tells this package apart from a distro build.
45
./build/src/tio --version
46
}
47
48
package() {
49
meson install -C build --destdir "$pkgdir"
50
install -Dm644 tio/LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
51
}
52
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-23 21:40:52 | Low | 2 |