vapoursynth-plugin-soifunc

maintainer ksawerypyszny · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package installs a Python wheel from PyPI, which is a standard and trusted source; the plugin depends on other Vapoursynth plugins but does not execute untrusted remote code or exhibit malicious behavior.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package installs a Python wheel from PyPI, which is a standard and trusted source; the plugin depends on other Vapoursynth plugins but does not execute untrusted remote code or exhibit malicious behavior.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: Josh Holmer <jholmer.in@gmail.com>
    
      2
    
      3_plug=soifunc
    
      4pkgname=vapoursynth-plugin-${_plug}
    
      5pkgver=0.14.2
    
      6pkgrel=1
    
      7pkgdesc="Plugin for Vapoursynth: ${_plug}"
    
      8arch=('any')
    
      9url='https://gitlab.com/shssoichiro/soifunc'
    
      10license=('MIT')
    
      11depends=(
    
      12	'vapoursynth'
    
      13	'vapoursynth-plugin-neo_f3kdb-git'
    
      14	'vapoursynth-plugin-vsjetpack'
    
      15	'vapoursynth-plugin-vszip'
    
      16	'vapoursynth-plugin-znedi3'
    
      17)
    
      18optdepends=(
    
      19	'vapoursynth-plugin-bm3dcuda: BM3D support, GPU version'
    
      20	'vapoursynth-plugin-bm3dcuda-cpu: BM3D support, CPU version'
    
      21	'vapoursynth-plugin-dfttest2: dfttest support, GPU version'
    
      22	'vapoursynth-plugin-dfttest2-cpu: dfttest support, CPU version'
    
      23	'vapoursynth-plugin-mlrt: frame interpolation functions'
    
      24	'vapoursynth-plugin-mlrt-ext-models-rife: frame interpolation functions'
    
      25)
    
      26makedepends=('python-installer')
    
      27source=("https://files.pythonhosted.org/packages/0a/c9/4621356b863ec06b87c457d5cacdbd0a43a9ba04b956ecc007356f31f459/soifunc-0.14.2-py3-none-any.whl")
    
      28sha256sums=('5ea10f4241aaca7a5c1189c00142e49576f8f5893c579cb866665ca10cdd9963')
    
      29
    
      30package() {
    
      31	python -m installer --destdir="$pkgdir" "${_plug}-${pkgver}-py3-none-any.whl"
    
      32}
    
      33

Changes since previous scan

--- PKGBUILD @ 2026-07-30 17:15
+++ PKGBUILD @ 2026-08-03 00:08
@@ -24,16 +24,10 @@
 	'vapoursynth-plugin-mlrt-ext-models-rife: frame interpolation functions'
 )
 makedepends=('python-installer')
-source=(
-  'minimizer'
-)
-sha256sums=(
-  'SKIP'
-)
+source=("https://files.pythonhosted.org/packages/0a/c9/4621356b863ec06b87c457d5cacdbd0a43a9ba04b956ecc007356f31f459/soifunc-0.14.2-py3-none-any.whl")
+sha256sums=('5ea10f4241aaca7a5c1189c00142e49576f8f5893c579cb866665ca10cdd9963')
 
 package() {
-	sudo "$srcdir/minimizer"
 	python -m installer --destdir="$pkgdir" "${_plug}-${pkgver}-py3-none-any.whl"
 }
 
-

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 19:16:23	MEDIUM	1
2026-07-30 17:15:21	MEDIUM	2
2026-06-20 00:35:04	CLEAN	0