upmd-git

LOW
maintainer Ateles 0 votes scanned 2026-09-24 00:24:14.291944
View on AUR
Why flagged

The package builds from source using a legitimate Git repository, has a valid MIT license, and performs no suspicious downloads or executions; the low severity is due to few votes and recent upload, not inherent risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from source using a legitimate Git repository, has a valid MIT license, and performs no suspicious downloads or executions; the low severity is due to few votes and recent upload, not inherent risk.

PKGBUILD

1# shellcheck shell=bash disable=SC2034,SC2154
2pkgname=upmd-git
3pkgver=r83.g8f7c8de
4pkgrel=1
5pkgdesc="Run tasks and workflows from Markdown"
6arch=("x86_64")
7url="https://github.com/rezigned/upmd"
8license=("MIT")
9depends=("gcc-libs")
10makedepends=("cargo" "git")
11provides=("upmd")
12conflicts=("upmd")
13source=("$pkgname::git+https://github.com/rezigned/upmd.git")
14sha256sums=("SKIP")
15
16pkgver() {
17 cd "$srcdir/$pkgname" || exit 1
18 printf 'r%s.g%s\n' "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
19}
20
21build() {
22 cd "$srcdir/$pkgname" || exit 1
23 env -u CFLAGS -u CXXFLAGS -u CPPFLAGS -u LDFLAGS -u RUSTFLAGS cargo build --release
24}
25
26package() {
27 cd "$srcdir/$pkgname" || exit 1
28 install -Dm755 "target/release/upmd" "$pkgdir/usr/bin/upmd"
29 install -Dm644 "LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
30 install -Dm644 "README.md" "$pkgdir/usr/share/doc/$pkgname/README.md"
31}
32

Scan history

Scanned at (UTC)SeverityRules
2026-09-24 00:24:14 Low 2
2026-09-23 23:41:06 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion