yggmail-git

LOW

maintainer LandonKuehner 0 votes scanned 2026-10-25 03:41:34.818471

View on AUR

Why flagged

The package builds from a legitimate project Git repository, has minimal votes and recent upload, but performs standard Go build steps without executing untrusted remote code or installing prebuilt binaries.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a legitimate project Git repository, has minimal votes and recent upload, but performs standard Go build steps without executing untrusted remote code or installing prebuilt binaries.

PKGBUILD

      1# Maintainer: Landon Kuehner <Landon.kuehner@proton.me>
    
      2
    
      3pkgname=yggmail-git
    
      4_pkgname=yggmail
    
      5pkgver=r121.727c60d
    
      6pkgrel=1
    
      7pkgdesc="End-to-end encrypted email for the mesh networking age"
    
      8arch=('x86_64')
    
      9url="https://github.com/neilalexander/${_pkgname}"
    
      10license=('MPL-2.0')
    
      11
    
      12depends=(glibc)
    
      13makedepends=('git' 'go')
    
      14
    
      15provides=('yggmail')
    
      16conflicts=('yggmail')
    
      17
    
      18source=("$_pkgname::git+https://github.com/neilalexander/${_pkgname}.git")
    
      19sha256sums=('SKIP')
    
      20
    
      21pkgver() {
    
      22	cd "${srcdir}/${_pkgname}"
    
      23    printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
    
      24}
    
      25
    
      26prepare() {
    
      27	cd "${srcdir}/${_pkgname}"
    
      28	export GOPATH="${srcdir}/.go"
    
      29	go mod download -modcacherw
    
      30}
    
      31
    
      32build() {
    
      33	cd "${srcdir}/${_pkgname}"
    
      34
    
      35	export CGO_CPPFLAGS="${CPPFLAGS}"
    
      36	export CGO_CFLAGS="${CFLAGS}"
    
      37	export CGO_CXXFLAGS="${CXXFLAGS}"
    
      38	export CGO_LDFLAGS="${LDFLAGS}"
    
      39	export GOFLAGS="-buildmode=pie -trimpath -ldflags=-linkmode=external -mod=readonly -modcacherw"
    
      40
    
      41	go build \
    
      42    	-trimpath \
    
      43    	-buildmode=pie \
    
      44    	-mod=readonly \
    
      45    	-modcacherw \
    
      46    	-ldflags "-linkmode external -extldflags \"${LDFLAGS}\"" \
    
      47		"./cmd/${_pkgname}"
    
      48}
    
      49
    
      50package() {
    
      51	cd "${srcdir}/${_pkgname}"
    
      52
    
      53	install -Dm755 -t "${pkgdir}/usr/bin" ${_pkgname}
    
      54	install -Dm644 LICENSE -t "${pkgdir}/usr/share/licenses/${_pkgname}"
    
      55}
    
      56

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-25 03:41:34	Low	2