audio.cpp-cuda-git

maintainer Orion-zhen · 0 votes · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged The package builds from a public git repository with a SKIP'd checksum, but sources are from the project's official GitHub; no untrusted executables or remote code execution; low risk due to lack of source verification but otherwise normal build process.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a public git repository with a SKIP'd checksum, but sources are from the project's official GitHub; no untrusted executables or remote code execution; low risk due to lack of source verification but otherwise normal build process.

PKGBUILD

      1# Maintainer: Orion-zhen <https://github.com/Orion-zhen>
    
      2
    
      3pkgname=audio.cpp-cuda-git
    
      4_pkgname=audio.cpp
    
      5pkgver=r357.df6e948
    
      6pkgrel=1
    
      7pkgdesc='All-in-one C++ audio inference engine on ggml with NVIDIA CUDA support (git version)'
    
      8arch=('x86_64')
    
      9url='https://github.com/0xShug0/audio.cpp'
    
      10license=('Apache-2.0')
    
      11depends=(
    
'cuda'
    
'gcc-libs'
    
'glibc'
    
'nvidia-utils'
    
'python'
    
      17)
    
      18makedepends=(
    
'cmake'
    
'git'
    
'ninja'
    
      22)
    
      23provides=(
    
'audio.cpp'
    
'audio.cpp-cuda'
    
      26)
    
      27conflicts=('audio.cpp')
    
      28options=(lto !debug)
    
      29source=("${_pkgname}::git+${url}.git")
    
      30sha256sums=('SKIP')
    
      31
    
      32pkgver() {
    
cd "${srcdir}/${_pkgname}"
    
printf 'r%s.%s' "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
    
      35}
    
      36
    
      37build() {
    
if [[ -z "${NVCC_CCBIN:-}" ]]; then
    
  source /etc/profile
    
fi
    
      41
    
local _cuda_architectures="${AUDIOCPP_CUDA_ARCHITECTURES:-}"
    
local _cmake_options=(
    
  -S "${srcdir}/${_pkgname}"
    
  -B build
    
  -G Ninja
    
  -DCMAKE_BUILD_TYPE=Release
    
  -DENGINE_ENABLE_CUDA=ON
    
  -DENGINE_ENABLE_HIP=OFF
    
  -DENGINE_ENABLE_VULKAN=OFF
    
  -DGGML_CUDA_FA_ALL_QUANTS=ON
    
  -DAUDIOCPP_DEPLOYMENT_BUILD=ON
    
)
    
      54
    
# Match llama.cpp-cuda's CI behavior: GitHub Actions runners generally have
    
# no visible GPU, so disable host-native CPU code and build the complete set
    
# of dynamically selected CPU backends. Unlike ggml's default-only path,
    
# audio.cpp's own CUDA sources also need an explicit non-native architecture
    
# list on a GPU-less runner.
    
if [[ -n "${CI:-}" && "${CI}" != 0 ]]; then
    
  echo "CI = ${CI} detected, building universal package"
    
  _cmake_options+=(
    
    -DENGINE_ENABLE_CPU_ALL_VARIANTS=ON
    
    -DENGINE_ENABLE_NATIVE_CPU=OFF
    
  )
    
  if [[ -z "${_cuda_architectures}" ]]; then
    
    _cuda_architectures='75-virtual;80-virtual;86-real;89-real;120a-real;121a-real'
    
  fi
    
else
    
  _cmake_options+=(
    
    -DENGINE_ENABLE_CPU_ALL_VARIANTS=OFF
    
    -DENGINE_ENABLE_NATIVE_CPU=ON
    
  )
    
fi
    
      75
    
if [[ -n "${_cuda_architectures}" ]]; then
    
  _cmake_options+=(
    
    "-DCMAKE_CUDA_ARCHITECTURES=${_cuda_architectures}"
    
  )
    
fi
    
      81
    
# Allow CI workflows and local builders to append project-specific CMake
    
# options without maintaining a second PKGBUILD.
    
if [[ -n "${AUDIOCPP_BUILD_EXTRA_ARGS:-}" ]]; then
    
  echo "Applied custom CMake build args: ${AUDIOCPP_BUILD_EXTRA_ARGS}"
    
  # shellcheck disable=SC2206
    
  _cmake_options+=(${AUDIOCPP_BUILD_EXTRA_ARGS})
    
fi
    
      89
    
cmake "${_cmake_options[@]}"
    
cmake --build build --parallel "$(nproc)" --target \
    
  audiocpp_cli \
    
  audiocpp_server \
    
  audiocpp_gguf
    
      95}
    
      96
    
      97package() {
    
# Universal CI builds produce private shared ggml/backend libraries, while
    
# local native builds are static. Keep executables in the same private
    
# directory in both cases: their $ORIGIN RPATH then finds CI libraries without
    
# exposing audio.cpp's incompatible ggml through /usr/lib.
    
install -d "${pkgdir}/usr/bin" "${pkgdir}/usr/lib/${_pkgname}"
    
install -Dm755 \
    
  build/bin/audiocpp_cli \
    
  build/bin/audiocpp_server \
    
  build/bin/audiocpp_gguf \
    
  -t "${pkgdir}/usr/lib/${_pkgname}"
    
for _binary in audiocpp_cli audiocpp_server audiocpp_gguf; do
    
  ln -s "../lib/${_pkgname}/${_binary}" "${pkgdir}/usr/bin/${_binary}"
    
done
    
      111
    
if compgen -G 'build/bin/*.so*' >/dev/null; then
    
  cp -a build/bin/*.so* "${pkgdir}/usr/lib/${_pkgname}/"
    
fi
    
      115
    
# Keep the script and catalog in the same relative layout expected by the
    
# model manager, then expose a convenient command through /usr/bin.
    
install -Dm755 "${srcdir}/${_pkgname}/tools/model_manager_v2.py" \
    
  "${pkgdir}/usr/share/${_pkgname}/tools/model_manager_v2.py"
    
cp -a "${srcdir}/${_pkgname}/model_specs" \
    
  "${pkgdir}/usr/share/${_pkgname}/model_specs"
    
ln -s "../share/${_pkgname}/tools/model_manager_v2.py" \
    
  "${pkgdir}/usr/bin/audiocpp_model_manager"
    
      124
    
install -Dm644 "${srcdir}/${_pkgname}/LICENSE" \
    
  "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
install -Dm644 "${srcdir}/${_pkgname}/README.md" \
    
  "${pkgdir}/usr/share/doc/${_pkgname}/README.md"
    
cp -a "${srcdir}/${_pkgname}/docs" \
    
  "${pkgdir}/usr/share/doc/${_pkgname}/docs"
    
      131}
    
      132

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	2
2026-08-17 00:18:29	LOW	2
2026-08-16 00:03:42	LOW	2
2026-08-15 11:30:23	LOW	2