uim-mozc

maintainer Microwave_Chef · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds a uim plugin for Mozc from source using official GitHub repositories; the flagged pattern is due to recent maintainer change, not malicious behavior, and all actions are transparent and within expected AUR packaging practices.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds a uim plugin for Mozc from source using official GitHub repositories; the flagged pattern is due to recent maintainer change, not malicious behavior, and all actions are transparent and within expected AUR packaging practices.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: phenylshima <phenylshima at outlook dot com>
    
      2# Contributor: ponsfoot <cabezon dot hashimoto at gmail dot com>
    
      3
    
      4## NOTE: This doens't support kill_line feature of uim.
    
      5
    
      6# renovate: aur-sync depName=mozc ba72b401ebf729ff7d377ed6c2ad55a5c94d0b8b
    
      7
    
      8_uimmozcrev="7beac7ba000e0459a4dc933f3873b521664d2665"
    
      9_mozcrev="76887c679e1e4f156102e4bc62ea9cf9174678a3"
    
      10
    
      11pkgname=uim-mozc
    
      12_pkgname=mozc
    
      13pkgver=3.34.6239
    
      14pkgrel=1
    
      15pkgdesc="uim plugin module for Mozc"
    
      16arch=('i686' 'x86_64')
    
      17url="https://github.com/e-kato/macuim"
    
      18license=('BSD')
    
      19groups=('mozc-im')
    
      20depends=('mozc>=3.34.6239' 'uim')
    
      21install=${pkgname}.install
    
      22makedepends=('bazel' 'git' 'python')
    
      23source=(
    
      24  mozc::git+https://github.com/google/mozc.git#commit=${_mozcrev}
    
      25  uim-mozc::git+https://github.com/e-kato/macuim.git#commit=${_uimmozcrev}
    
      26  'bazel.patch'
    
      27  'mozc.patch'
    
      28  'BUILD.bazel'
    
      29)
    
      30sha1sums=('0af3717e55fddb91261482525b6909dc4a7a90ad'
    
      31          '5e31fe1c6a6c075bfd5d9eee19d9db42ab3b216e'
    
      32          '526283e85d29763fef6fe8e7851e5ae91311982d'
    
      33          '573f03428b0e6aa9c35702a411bae4e2721abd59'
    
      34          '0544ea55c47778d20f690216b2573d28efed27de')
    
      35
    
      36prepare() {
    
      37  cd "${srcdir}/${_pkgname}/"
    
      38
    
      39  patch -p1 -i "${srcdir}/bazel.patch"
    
      40
    
      41  cd "${srcdir}/${_pkgname}/src"
    
      42
    
      43  cp -rf "${srcdir}/uim-mozc/Mozc/uim" unix/
    
      44  patch -p1 -i "${srcdir}/mozc.patch"
    
      45
    
      46  cp -rf "${srcdir}/BUILD.bazel" unix/uim
    
      47
    
      48  # Extract license part of uim-mozc
    
      49  head -n 32 unix/uim/mozc.cc > unix/uim/LICENSE
    
      50}
    
      51
    
      52
    
      53build() {
    
      54  cd "${srcdir}/${_pkgname}/src"
    
      55
    
      56  msg "Starting make..."
    
      57
    
      58  unset ANDROID_NDK_HOME
    
      59  unset ANDROID_HOME
    
      60  export JAVA_HOME='/usr/lib/jvm/java-21-openjdk/'
    
      61
    
      62bazel clean --expunge
    
      63
    
      64  bazel build unix/uim:uim-mozc unix/icons --config oss_linux --config stable_channel --compilation_mode opt --cxxopt=-Wno-uninitialized --host_cxxopt=-Wno-uninitialized --experimental_cc_shared_library
    
      65}
    
      66
    
      67package() {
    
      68  cd "${srcdir}/${_pkgname}/src"
    
      69  install -D -m 755 bazel-bin/unix/uim/libuim-mozc.so "${pkgdir}/usr/lib/uim/plugin/libuim-mozc.so"
    
      70  install -d "${pkgdir}/usr/share/uim"
    
      71  install    -m 644 ${srcdir}/uim-mozc/Mozc/scm/*.scm "${pkgdir}/usr/share/uim/"
    
      72  install -D -m 644 data/images/unix/ime_product_icon_opensource-32.png "${pkgdir}/usr/share/uim/pixmaps/mozc.png"
    
      73  install    -m 644 data/images/unix/ui-tool.png "${pkgdir}/usr/share/uim/pixmaps/mozc_tool_selector.png"
    
      74  install    -m 644 data/images/unix/ui-properties.png "${pkgdir}/usr/share/uim/pixmaps/mozc_tool_config_dialog.png"
    
      75  install    -m 644 data/images/unix/ui-dictionary.png "${pkgdir}/usr/share/uim/pixmaps/mozc_tool_dictionary_tool.png"
    
      76
    
      77  install -D -m 644 unix/uim/LICENSE "${pkgdir}/usr/share/licenses/${_pkgname}/uim-mozc/LICENSE"
    
      78}
    
      79

Changes since previous scan

--- PKGBUILD @ 2026-07-25 00:13
+++ PKGBUILD @ 2026-08-03 00:08
@@ -6,18 +6,18 @@
 # renovate: aur-sync depName=mozc ba72b401ebf729ff7d377ed6c2ad55a5c94d0b8b
 
 _uimmozcrev="7beac7ba000e0459a4dc933f3873b521664d2665"
-_mozcrev="3052f08b2bc0d60c84f640eecb74fcf77d05addc"
+_mozcrev="76887c679e1e4f156102e4bc62ea9cf9174678a3"
 
 pkgname=uim-mozc
 _pkgname=mozc
-pkgver=3.33.6079.102
+pkgver=3.34.6239
 pkgrel=1
 pkgdesc="uim plugin module for Mozc"
 arch=('i686' 'x86_64')
 url="https://github.com/e-kato/macuim"
 license=('BSD')
 groups=('mozc-im')
-depends=('mozc>=3.33.6079.102' 'uim')
+depends=('mozc>=3.34.6239' 'uim')
 install=${pkgname}.install
 makedepends=('bazel' 'git' 'python')
 source=(
@@ -27,16 +27,15 @@
   'mozc.patch'
   'BUILD.bazel'
 )
-sha1sums=('SKIP'
-          'SKIP'
+sha1sums=('0af3717e55fddb91261482525b6909dc4a7a90ad'
+          '5e31fe1c6a6c075bfd5d9eee19d9db42ab3b216e'
           '526283e85d29763fef6fe8e7851e5ae91311982d'
           '573f03428b0e6aa9c35702a411bae4e2721abd59'
-          'eb8bcf1e55280ad85960aad3bce7631a487bb5f6')
+          '0544ea55c47778d20f690216b2573d28efed27de')
 
 prepare() {
   cd "${srcdir}/${_pkgname}/"
 
-  git submodule update --init --recursive
   patch -p1 -i "${srcdir}/bazel.patch"
 
   cd "${srcdir}/${_pkgname}/src"
@@ -60,7 +59,9 @@
   unset ANDROID_HOME
   export JAVA_HOME='/usr/lib/jvm/java-21-openjdk/'
 
-  bazel build unix/uim:uim-mozc unix/icons --config oss_linux --compilation_mode opt --cxxopt=-Wno-uninitialized --host_cxxopt=-Wno-uninitialized --experimental_cc_shared_library
+bazel clean --expunge
+
+  bazel build unix/uim:uim-mozc unix/icons --config oss_linux --config stable_channel --compilation_mode opt --cxxopt=-Wno-uninitialized --host_cxxopt=-Wno-uninitialized --experimental_cc_shared_library
 }
 
 package() {

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 05:29:17	MEDIUM	1
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 01:22:21	MEDIUM	1
2026-06-18 16:11:54	CLEAN	0