audioclock-bin

maintainer MrQuantumOFF · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package re-packages prebuilt Debian binaries from the project's official GitHub repository, which is a normal practice for AUR binary packages; the sources are verifiable via checksums and hosted on a trusted platform, posing minimal risk.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package re-packages prebuilt Debian binaries from the project's official GitHub repository, which is a normal practice for AUR binary packages; the sources are verifiable via checksums and hosted on a trusted platform, posing minimal risk.

PKGBUILD

      1# Maintainer: MrQuantumOFF <demiryerli@gmail.com>
    
      2
    
      3# GitHub slug the release .deb is downloaded from. The release pipeline rewrites
    
      4# this line to ${{ github.repository }} at publish time.
    
      5_ghrepo="mrquantumoff/audioclock"
    
      6
    
      7pkgname=audioclock-bin
    
      8pkgver=0.1.0
    
      9pkgrel=1
    
      10pkgdesc="Inspect and manage PipeWire and WirePlumber audio clock and format settings (prebuilt)"
    
      11arch=('x86_64' 'aarch64')
    
      12url="https://github.com/${_ghrepo}"
    
      13license=('MIT')
    
      14# The prebuilt binary hard-links libpipewire/libxkbcommon and dlopens the
    
      15# Wayland/GL/Vulkan client libraries at runtime; list both sets.
    
      16depends=('pipewire' 'wireplumber' 'libxkbcommon' 'wayland' 'vulkan-icd-loader' 'libglvnd')
    
      17provides=('audioclock')
    
      18conflicts=('audioclock')
    
      19# Repackages the Debian build for the matching arch (Debian calls them amd64 /
    
      20# arm64). It is compiled on an older glibc than Arch ships, so it runs here via
    
      21# forward compatibility; no rebuild happens.
    
      22_rel="https://github.com/${_ghrepo}/releases/download/v${pkgver}"
    
      23source_x86_64=("${_rel}/audioclock_${pkgver}-1_amd64.deb")
    
      24source_aarch64=("${_rel}/audioclock_${pkgver}-1_arm64.deb")
    
      25sha256sums_x86_64=('c3f9b1912df220bf290cde515e1837b72ede42dfb0bd5c8e2f51f05b8c8c8c85')
    
      26sha256sums_aarch64=('0a40a20ed29fbcac42a8742251b69eefda3ecb942c2c41fb30e19b8df464eb60')
    
      27
    
      28package() {
    
      29    cd "$srcdir"
    
      30    # Only the source for the building arch is fetched, so glob the one .deb.
    
      31    # A .deb is an `ar` archive; libarchive's bsdtar reads it and unpacks the
    
      32    # inner data member (data.tar.{zst,xz}) straight into the package root.
    
      33    bsdtar -xf audioclock_"${pkgver}"-1_*.deb
    
      34    bsdtar -xpf data.tar.* -C "$pkgdir/"
    
      35
    
      36    # cargo-deb ships the license as a Debian copyright file; move it to the
    
      37    # Arch-conventional location.
    
      38    if [[ -f "$pkgdir/usr/share/doc/audioclock/copyright" ]]; then
    
      39        install -Dm644 "$pkgdir/usr/share/doc/audioclock/copyright" \
    
      40            "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      41        rm -f "$pkgdir/usr/share/doc/audioclock/copyright"
    
      42    fi
    
      43}
    
      44

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 15:14:11	LOW	2
2026-07-20 11:14:00	LOW	2