alsachain-bin

LOW

maintainer MiguelMikeXP 0 votes scanned 2026-08-20 11:11:30.284264

View on AUR

Why flagged

The package downloads a prebuilt binary from a GitHub release, which is a common but suboptimal practice; however, it is from the project's own repository and no obfuscated or malicious behavior is evident.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package downloads a prebuilt binary from a GitHub release, which is a common but suboptimal practice; however, it is from the project's own repository and no obfuscated or malicious behavior is evident.

PKGBUILD

      1# Maintainer: Mikele <mikele@gmail.com>
    
      2
    
      3pkgname=alsachain-bin
    
      4pkgver=0.1.1
    
      5pkgrel=1
    
      6pkgdesc='Safe ALSA alsaequal virtual PCM manager'
    
      7arch=('x86_64')
    
      8url='https://github.com/mikelexp/alsachain'
    
      9license=('custom')
    
      10depends=('glibc' 'alsa-lib' 'alsa-utils' 'caps' 'alsaequal')
    
      11source=("${url}/releases/download/v${pkgver}/alsachain-${pkgver}-linux-${CARCH}.tar.gz")
    
      12sha256sums=('e557aae07afe454e5b738fd753a40622fbb92475777bad6743461092f8ed56e4')
    
      13
    
      14package() {
    
      15  install -Dm755 "${srcdir}/alsachain" "${pkgdir}/usr/bin/alsachain"
    
      16  install -Dm755 "${srcdir}/libasound_module_pcm_alsachain_status.so" "${pkgdir}/usr/lib/alsa-lib/libasound_module_pcm_alsachain_status.so"
    
      17  install -Dm644 "${srcdir}/README.md" "${pkgdir}/usr/share/doc/${pkgname}/README.md"
    
      18}
    
      19

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-20 11:11:30	Low	2
2026-08-20 09:10:51	Low	2