baken-bin

LOW

maintainer Dominiquini 1 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package downloads prebuilt binaries from the project's official GitHub releases, which is a normal practice for AUR binary packages; the orphaned/re-adopted status does not imply malicious intent or supply chain risk.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt binaries from the project's official GitHub releases, which is a normal practice for AUR binary packages; the orphaned/re-adopted status does not imply malicious intent or supply chain risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: Masanari Higashi <m-igashi@users.noreply.github.com>
    
      2
    
      3_pkgauthor=M-Igashi
    
      4_pkgname=baken
    
      5pkgname=${_pkgname}-bin
    
      6pkgdesc="Bake'n Deck - Rekordbox to CDJ prep toolkit: loudness gain, Key+BPM playlist sort, and CDJ-safe MP3 transcode"
    
      7
    
      8pkgver=4.6.0
    
      9pkgrel=1
    
      10_pkgvername=v${pkgver}
    
      11
    
      12arch=('x86_64' 'aarch64')
    
      13_barch=('linux-x86_64' 'linux-aarch64')
    
      14
    
      15url="https://github.com/${_pkgauthor}/${_pkgname}"
    
      16_urlraw="https://raw.githubusercontent.com/${_pkgauthor}/${_pkgname}/${_pkgvername}"
    
      17
    
      18license=('MIT')
    
      19
    
      20replaces=('headroom')
    
      21provides=("${_pkgname}")
    
      22conflicts=("${_pkgname}" 'headroom')
    
      23
    
      24depends=('glibc' 'libgcc' 'ffmpeg')
    
      25
    
      26source=("LICENSE-${pkgver}::${_urlraw}/LICENSE"
    
      27        "README-${pkgver}.md::${_urlraw}/README.md")
    
      28source_x86_64=("${_pkgname}-${arch[0]}-${pkgver}.tgz::${url}/releases/download/${_pkgvername}/${_pkgname}-${_pkgvername}-${_barch[0]}.tar.gz")
    
      29source_aarch64=("${_pkgname}-${arch[1]}-${pkgver}.tgz::${url}/releases/download/${_pkgvername}/${_pkgname}-${_pkgvername}-${_barch[1]}.tar.gz")
    
      30sha256sums=('45f62ea4b8704c36e13c62bdafb15076fc8bf618b9722496534193700a7f61bc'
    
      31            '06b601ba52dd40e5f1dec38f03288070871e8b685d3e16c25fad142692b4736a')
    
      32sha256sums_x86_64=('e7501bc7c3947a3aced454e8ba4999e0a0371940c5f02602d6645c77c3acec07')
    
      33sha256sums_aarch64=('fd8d376d842501d16b0347f0ceb170ba2a3ccd3ba0afa94f7044dd3f9a133a6d')
    
      34
    
      35
    
      36package() {
    
      37	cd "${srcdir}/" || exit
    
      38
    
      39	install -Dm755 "${_pkgname}" "${pkgdir}/usr/bin/${_pkgname}"
    
      40
    
      41	install -Dm644 "README-${pkgver}.md" "${pkgdir}/usr/share/doc/${pkgname}/README.md"
    
      42
    
      43	install -Dm644 "LICENSE-${pkgver}" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      44}
    
      45

Changes since previous scan

--- PKGBUILD @ 2026-10-12 00:18
+++ PKGBUILD @ 2026-10-17 00:21
@@ -5,7 +5,7 @@
 pkgname=${_pkgname}-bin
 pkgdesc="Bake'n Deck - Rekordbox to CDJ prep toolkit: loudness gain, Key+BPM playlist sort, and CDJ-safe MP3 transcode"
 
-pkgver=4.5.0
+pkgver=4.6.0
 pkgrel=1
 _pkgvername=v${pkgver}
 
@@ -28,9 +28,9 @@
 source_x86_64=("${_pkgname}-${arch[0]}-${pkgver}.tgz::${url}/releases/download/${_pkgvername}/${_pkgname}-${_pkgvername}-${_barch[0]}.tar.gz")
 source_aarch64=("${_pkgname}-${arch[1]}-${pkgver}.tgz::${url}/releases/download/${_pkgvername}/${_pkgname}-${_pkgvername}-${_barch[1]}.tar.gz")
 sha256sums=('45f62ea4b8704c36e13c62bdafb15076fc8bf618b9722496534193700a7f61bc'
-            'c28beb098149fc4b9da6fe899c07e0c154ace03f6909fa9b5589e8c3b2f75504')
-sha256sums_x86_64=('12b822b9d5e2ee7547cce75be710b64daec16aab9336ddb94718ed24b1ed0247')
-sha256sums_aarch64=('60394d1b76442a29323c9119fda7628d2b9c60928fe95262d66107769e396cb7')
+            '06b601ba52dd40e5f1dec38f03288070871e8b685d3e16c25fad142692b4736a')
+sha256sums_x86_64=('e7501bc7c3947a3aced454e8ba4999e0a0371940c5f02602d6645c77c3acec07')
+sha256sums_aarch64=('fd8d376d842501d16b0347f0ceb170ba2a3ccd3ba0afa94f7044dd3f9a133a6d')
 
 
 package() {

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 23:15:20	Medium	1
2026-10-12 00:18:51	Low	2
2026-10-11 00:26:05	Low	2
2026-10-10 22:16:18	Medium	1
2026-07-09 00:22:38	Clean	2
2026-07-08 09:27:40	Low	1