velvet-mux-git
LOW
maintainer kseistrup
1 votes
scanned 2026-09-13 09:14:07.132728
Why flagged
The package builds from the project's own Git repository on Codeberg, which is a legitimate forge; the low severity is due to few votes and recent upload, not malicious content.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from the project's own Git repository on Codeberg, which is a legitimate forge; the low severity is due to few votes and recent upload, not malicious content.
PKGBUILD
1
# shellcheck shell=bash
2
# -*- sh -*-
3
4
# Maintainer: Heine Otte <heinep@gmail.com>
5
# Contributor: Klaus Alexander Seistrup <$(echo 0x1fd+d59decfa=40 | tr 0-9+a-f=x ka-i@p-u.l)>
6
7
_gitname='velvet'
8
_pkgname="$_gitname-mux"
9
pkgname="$_pkgname-git"
10
pkgdesc='A scriptable terminal multiplexer (development version)'
11
pkgver=0.4.0.r139.g9a22bed
12
pkgrel=2
13
url="https://codeberg.org/alexnlarsen/$_gitname"
14
arch=('aarch64' 'x86_64')
15
license=('GPL-3.0-or-later')
16
makedepends=('git' 'make')
17
depends=('glibc' 'libutf8proc' 'luajit')
18
provides=("$_pkgname")
19
conflicts=("$_gitname-git" "${provides[@]}")
20
replaces=("$_gitname-git")
21
options=('!emptydirs')
22
#source=("git+$url.git#branch=dev")
23
source=("git+$url.git")
24
sha256sums=('SKIP')
25
26
pkgver() {
27
cd "$srcdir/$_gitname"
28
29
git describe --long --tags \
30
| sed 's/^v//;s/\([^-]*-g\)/r\1/;s/-/./g'
31
}
32
33
build() {
34
make PREFIX="$pkgdir/usr" -C "$srcdir/$_gitname"
35
}
36
37
package() {
38
make PREFIX="$pkgdir/usr" -C "$srcdir/$_gitname" install
39
}
40
41
# eof
42
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-13 09:14:07 | Low | 2 |