tracentp-git
LOW
maintainer RavuAlHemio
0 votes
scanned 2026-10-27 00:23:28.674093
Why flagged
The package builds from a public Git repository with a SKIP'd checksum, but the source is the project's own GitHub repo, and no untrusted executables are downloaded or executed.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a public Git repository with a SKIP'd checksum, but the source is the project's own GitHub repo, and no untrusted executables are downloaded or executed.
PKGBUILD
1
# Maintainer: Ondřej Hošek <ondra.hosek@gmail.com>
2
pkgname=tracentp-git
3
pkgver=1.1.0.r0.53c4ab7
4
pkgrel=1
5
pkgdesc="Network Time Protocol (NTP) tracer"
6
arch=('x86_64')
7
url="https://github.com/mengzhuo/tracentp"
8
license=('MIT')
9
makedepends=('go' 'git')
10
provides=("${pkgname%-git}")
11
conflicts=("${pkgname%-git}")
12
source=("${pkgname%-git}::git+https://github.com/mengzhuo/tracentp.git")
13
sha256sums=('SKIP')
14
15
pkgver() {
16
cd "$srcdir/${pkgname%-git}"
17
printf "%s" "$(git describe --long --tags | sed 's/\([^-]*-\)g/r\1/;s/-/./g;s/^v//')"
18
}
19
20
build() {
21
cd "$srcdir/${pkgname%-git}"
22
export CGO_CPPFLAGS="${CPPFLAGS}"
23
export CGO_CFLAGS="${CFLAGS}"
24
export CGO_CXXFLAGS="${CXXFLAGS}"
25
export CGO_LDFLAGS="${LDFLAGS}"
26
export GOPATH="${srcdir}"
27
export GOFLAGS="-buildmode=pie -trimpath -ldflags=-linkmode=external -mod=readonly -modcacherw"
28
go build -o "${pkgname%-git}" main.go
29
}
30
31
check() {
32
cd "$srcdir/${pkgname%-git}"
33
go test -v ./...
34
}
35
36
package() {
37
cd "$srcdir/${pkgname%-git}"
38
install -Dm755 "${pkgname%-git}" "${pkgdir}/usr/bin/${pkgname%-git}"
39
}
40
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 21:45:59 | Low | 2 |