weather-tui

LOW

maintainer Dominiquini 1 votes scanned 2026-11-06 00:21:40.447623

View on AUR

Why flagged

The package builds from a GitHub source tarball with a pinned version and valid checksum, which is a normal AUR practice; the low severity is due to few votes and recent upload, not code risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package builds from a GitHub source tarball with a pinned version and valid checksum, which is a normal AUR practice; the low severity is due to few votes and recent upload, not code risk.

PKGBUILD

      1# Maintainer: Rafael Dominiquini <rafaeldominiquini at gmail dot com>
    
      2
    
      3pkgauthor="benedikt-mayer"
    
      4pkgname="weather-tui"
    
      5pkgver=1.4.0
    
      6pkgrel=1
    
      7pkgdesc="A TUI application for displaying weather forecasts with hour-by-hour graphs"
    
      8
    
      9_pypi_package=${pkgname}
    
      10_pypi_version=${pkgver}
    
      11
    
      12license=('MIT')
    
      13arch=('any')
    
      14
    
      15_url_pypi="https://pypi.org/project/${pkgname}/"
    
      16_url_github="https://github.com/${pkgauthor}/${pkgname}"
    
      17url=${_url_github}
    
      18
    
      19provides=("${_pypi_package}")
    
      20
    
      21makedepends=('python-setuptools' 'python-wheel' 'python-build' 'python-installer' 'python-hatchling')
    
      22depends=('python' 'python-textual' 'python-textual-plotext' 'python-dotenv' 'python-httpx' 'python-openmeteo-sdk' 'python-openmeteo-requests')
    
      23
    
      24# source=("https://files.pythonhosted.org/packages/source/${_pypi_package::1}/${_pypi_package//-/_}/${_pypi_package//-/_}-${_pypi_version}.tar.gz")
    
      25source=("${_pypi_package}-${_pypi_version}.tar.gz::${_url_github}/archive/refs/tags/v${pkgver}.tar.gz")
    
      26sha256sums=('ce5171d271de3461f82c37867b4abc114e837380a2a3e049de6b430005d89f04')
    
      27
    
      28
    
      29build() {
    
      30    cd "${srcdir}/${_pypi_package}-${_pypi_version}/" || exit
    
      31
    
      32    python -m build --wheel --no-isolation
    
      33}
    
      34
    
      35package() {
    
      36    cd "${srcdir}/${_pypi_package}-${_pypi_version}/" || exit
    
      37
    
      38    python -m installer --destdir="${pkgdir}" dist/*.whl
    
      39
    
      40    install -Dm644 "README.md" "${pkgdir}/usr/share/doc/${pkgname}/README.md"
    
      41
    
      42    install -Dm644 "LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      43}
    
      44

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-06 00:21:40	Low	2
2026-11-06 00:11:05	Low	2