zlib-git

LOW

maintainer Chocobo1 3 votes scanned 2026-10-27 00:23:28.674093

View on AUR

Why flagged

The package builds from the official zlib GitHub repository, which is a legitimate source; the recent orphaning and re-adoption is a metadata concern but does not imply malicious intent or supply-chain risk.

Triggered rules

Low AI review of an ambiguous pattern llm_review

The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it LOW (confidence 95%): The package builds from the official zlib GitHub repository, which is a legitimate source; the recent orphaning and re-adoption is a metadata concern but does not imply malicious intent or supply-chain risk.

PKGBUILD

      1# Maintainer: Chocobo1 <chocobo1 AT archlinux DOT net>
    
      2
    
      3pkgbase=zlib-git
    
      4pkgname=('minizip-git' 'zlib-git')
    
      5pkgver=1.3.2.r138.ge4904270
    
      6pkgrel=1
    
      7pkgdesc="A massively spiffy yet delicately unobtrusive compression library (git develop branch)"
    
      8arch=('i686' 'x86_64')
    
      9url="https://www.zlib.net/"
    
      10license=('Zlib')
    
      11depends=('glibc')
    
      12makedepends=('git')
    
      13options=('staticlibs')
    
      14source=("git+https://github.com/madler/zlib.git#branch=develop")
    
      15sha256sums=('SKIP')
    
      16
    
      17
    
      18pkgver() {
    
      19  cd "zlib"
    
      20
    
      21  _tag=$(git tag -l --sort -v:refname | grep -E '^v?[0-9\.]+$' | head -n1)
    
      22  _rev=$(git rev-list --count "$_tag"..HEAD)
    
      23  _hash=$(git rev-parse --short HEAD)
    
      24  printf "%s.r%s.g%s" "$_tag" "$_rev" "$_hash" | sed 's/^v//'
    
      25}
    
      26
    
      27build() {
    
      28  cd "zlib"
    
      29
    
      30  CFLAGS="$CFLAGS -ffat-lto-objects" \
    
      31  ./configure \
    
      32    --prefix="/usr"
    
      33  make
    
      34
    
      35  cd "contrib/minizip"
    
      36
    
      37  autoreconf -fi
    
      38  ./configure \
    
      39    --prefix="/usr"
    
      40  make
    
      41}
    
      42
    
      43check() {
    
      44  cd "zlib"
    
      45
    
      46  #make test
    
      47  #make -C "contrib/minizip" test
    
      48}
    
      49
    
      50package_zlib-git() {
    
      51  pkgdesc="A massively spiffy yet delicately unobtrusive compression library (git develop branch)"
    
      52  provides=("zlib=$pkgver" "zlib-static=$pkgver" 'libz.so')
    
      53  conflicts=('zlib' 'zlib-static')
    
      54
    
      55  cd "zlib"
    
      56
    
      57  make DESTDIR="$pkgdir" install
    
      58
    
      59  install -Dm644 "LICENSE" -t "$pkgdir/usr/share/licenses/zlib"
    
      60}
    
      61
    
      62package_minizip-git() {
    
      63  pkgdesc="Mini zip and unzip based on zlib"
    
      64  depends+=('zlib')
    
      65  provides=("minizip=$pkgver" 'libminizip.so')
    
      66  conflicts=('minizip')
    
      67
    
      68  cd "zlib/contrib/minizip"
    
      69
    
      70  make DESTDIR="$pkgdir" install
    
      71
    
      72  install -Dm644 "../../LICENSE" -t "$pkgdir/usr/share/licenses/minizip"
    
      73}
    
      74

Changes since previous scan

--- PKGBUILD @ 2026-10-12 15:13
+++ PKGBUILD @ 2026-10-27 00:23
@@ -1,8 +1,8 @@
 # Maintainer: Chocobo1 <chocobo1 AT archlinux DOT net>
 
 pkgbase=zlib-git
-pkgname=('zlib-git') # minizip-git
-pkgver=1.3.2.r110.g767c4c94
+pkgname=('minizip-git' 'zlib-git')
+pkgver=1.3.2.r138.ge4904270
 pkgrel=1
 pkgdesc="A massively spiffy yet delicately unobtrusive compression library (git develop branch)"
 arch=('i686' 'x86_64')

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-27 00:23:28	Low	1
2026-10-26 17:46:00	Low	1
2026-10-12 15:13:59	Clean	0
2026-06-18 16:11:54	Clean	0