whatisit-nl2sh-git

LOW

maintainer SCDevel 0 votes scanned 2026-09-06 07:10:31.945140

View on AUR

Why flagged

The package builds from a public Git repository with a SKIP'd checksum, but it is a legitimate source-based AUR package that compiles its own Python wheel; no remote code execution or malicious payloads are present.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a public Git repository with a SKIP'd checksum, but it is a legitimate source-based AUR package that compiles its own Python wheel; no remote code execution or malicious payloads are present.

PKGBUILD

      1# Maintainer: SCDevel <root@scevel.net>
    
      2
    
      3pkgname=whatisit-nl2sh-git
    
      4pkgver=r180.gf9c3e79
    
      5pkgrel=1
    
      6pkgdesc="Local natural-language-to-shell command generator"
    
      7arch=('any')
    
      8url="https://github.com/ThorOdinson246/whatisit-nl2sh"
    
      9license=('Apache-2.0')
    
      10
    
      11depends=(
    
      12    'python'
    
      13)
    
      14
    
      15optdepends=(
    
      16    'llama-cpp: local LLM inference backend'
    
      17)
    
      18
    
      19makedepends=(
    
      20    'git'
    
      21    'python-build'
    
      22    'python-installer'
    
      23    'python-setuptools'
    
      24    'python-wheel'
    
      25)
    
      26
    
      27provides=('whatisit')
    
      28conflicts=('whatisit')
    
      29
    
      30source=("git+$url.git")
    
      31sha256sums=('SKIP')
    
      32
    
      33pkgver() {
    
      34    cd "$srcdir/whatisit-nl2sh"
    
      35
    
      36    printf "r%s.g%s" \
    
      37        "$(git rev-list --count HEAD)" \
    
      38        "$(git rev-parse --short=7 HEAD)"
    
      39}
    
      40
    
      41build() {
    
      42    cd "$srcdir/whatisit-nl2sh/whatisit_pkg"
    
      43
    
      44    python -m build --wheel --no-isolation
    
      45}
    
      46
    
      47package() {
    
      48    cd "$srcdir/whatisit-nl2sh/whatisit_pkg"
    
      49
    
      50    python -m installer \
    
      51        --destdir="$pkgdir" \
    
      52        dist/*.whl
    
      53
    
      54    install -Dm644 \
    
      55        "$srcdir/whatisit-nl2sh/LICENSE" \
    
      56        "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      57
    
      58    install -Dm644 \
    
      59        "$srcdir/whatisit-nl2sh/NOTICE" \
    
      60        "$pkgdir/usr/share/licenses/$pkgname/NOTICE"
    
      61}
    
      62

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-06 07:10:31	Low	2
2026-09-06 05:10:24	Low	2