uniconvertor

LOW

maintainer orphaned 0 votes scanned 2026-09-22 05:36:56.274624

View on AUR

Why flagged

The package builds from a source tarball hosted on a personal Archive.org subdomain; while the host is not a standard upstream, it is a static archive of what appears to be the project's own release, and the build process is transparent using standard Python setup—no execution of remote code or obfuscated payloads.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a source tarball hosted on a personal Archive.org subdomain; while the host is not a standard upstream, it is a static archive of what appears to be the project's own release, and the build process is transparent using standard Python setup—no execution of remote code or obfuscated payloads.

PKGBUILD

      1# Maintainer: Fabio 'Lolix' Loli <fabio.loli@disroot.org> -> https://github.com/FabioLolix
    
      2# Contributor: Ihor Novikov <sk1.project.org@gmail.com>
    
      3# Contributor: Sergej Pupykin <pupykin.s+arch@gmail.com>
    
      4# Contributor: Roberto Alsina <ralsina@kde.org>
    
      5
    
      6pkgname=uniconvertor
    
      7pkgver=2.0rc5
    
      8pkgrel=1
    
      9pkgdesc="Universal vector graphics translator using sK1 engine."
    
      10arch=(x86_64)
    
      11url="https://sk1project.net/uc2/"
    
      12license=(GPL3)
    
      13depends=(lcms2 cairo imagemagick pango python2-cairo
    
      14         python2-pillow python2-reportlab)
    
      15source=(
    
      16    #"https://downloads.sk1project.net/uc2/uniconvertor-${pkgver}.tar.gz"
    
      17    https://sourceforge.net/projects/fabiololix-os-archive/files/src/uniconvertor-${pkgver}.tar.gz
    
      18    )
    
      19sha256sums=('55660b0757ee90b04c532252f98b5d95f5c6060e8bd8e1448ae50951894a3d3d')
    
      20
    
      21build() {
    
      22  cd "${srcdir}/${pkgname}-${pkgver}"
    
      23  python2 setup.py build
    
      24}
    
      25
    
      26package() {
    
      27  cd "${srcdir}/${pkgname}-${pkgver}"
    
      28  python2 setup.py install --root="${pkgdir}" --optimize=1 --skip-build
    
      29}
    
      30

Changes since previous scan

--- PKGBUILD @ 2026-09-13 00:19
+++ PKGBUILD @ 2026-09-22 05:36
@@ -10,9 +10,12 @@
 arch=(x86_64)
 url="https://sk1project.net/uc2/"
 license=(GPL3)
-depends=(lcms2 cairo imagemagick pango python2-cairo 
+depends=(lcms2 cairo imagemagick pango python2-cairo
          python2-pillow python2-reportlab)
-source=("https://downloads.sk1project.net/uc2/uniconvertor-$pkgver.tar.gz")
+source=(
+    #"https://downloads.sk1project.net/uc2/uniconvertor-${pkgver}.tar.gz"
+    https://sourceforge.net/projects/fabiololix-os-archive/files/src/uniconvertor-${pkgver}.tar.gz
+    )
 sha256sums=('55660b0757ee90b04c532252f98b5d95f5c6060e8bd8e1448ae50951894a3d3d')
 
 build() {

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-22 05:36:56	Low	2
2026-09-13 21:15:24	Clean	0
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 00:29:17	Low	2
2026-08-28 00:07:31	Low	2
2026-08-27 00:08:17	Low	2