badapple-hd

LOW
maintainer Raj-1727 0 votes scanned 2026-09-17 07:25:15.887874
View on AUR
Why flagged

The package downloads a video file and a script from the project's own GitHub repository; the script is installed as an executable, but both sources are from a plausible project-owned host, and the worst case of a swapped source is limited to non-executable data or a benign script.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a video file and a script from the project's own GitHub repository; the script is installed as an executable, but both sources are from a plausible project-owned host, and the worst case of a swapped source is limited to non-executable data or a benign script.

PKGBUILD

1pkgname=badapple-hd
2pkgver=1.0.0
3pkgrel=1
4pkgdesc="Play badapple in your terminal in the highest quality possible!"
5arch=('any')
6url="https://github.com/Raj-1727/badapple-hd"
7license=('MIT')
8
9depends=(
10 'python'
11 'ffmpeg'
12 'figlet'
13 'lolcat'
14)
15
16source=(
17 "badapple-hd"
18 "badapple.mp4::https://raw.githubusercontent.com/Raj-1727/badapple-hd/main/badapple.mp4"
19)
20
21sha256sums=(
22 'SKIP'
23 'SKIP'
24)
25
26package() {
27 install -Dm755 "$srcdir/badapple-hd" \
28 "$pkgdir/usr/bin/badapple-hd"
29
30 install -Dm644 "$srcdir/badapple.mp4" \
31 "$pkgdir/usr/share/badapple-hd/badapple-hd/badapple.mp4"
32}
33

Scan history

Scanned at (UTC)SeverityRules
2026-09-17 07:25:15 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion