biliup-git

LOW

maintainer lightjunction 0 votes scanned 2026-10-30 07:55:24.485540

View on AUR

Why flagged

Package builds from its own git source and includes non-executable font files from trusted CDNs; no remote code execution or supply-chain risks beyond normal AUR package expectations.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): Package builds from its own git source and includes non-executable font files from trusted CDNs; no remote code execution or supply-chain risks beyond normal AUR package expectations.

PKGBUILD

      1# Maintainer: lightjunction
    
      2
    
      3pkgname=biliup-git
    
      4pkgver=1.3.4.r7.gc2a8f41
    
      5pkgrel=1
    
      6pkgdesc='Automatic livestream recording and Bilibili video uploader'
    
      7arch=('x86_64' 'aarch64')
    
      8url='https://github.com/biliup/biliup'
    
      9license=('MIT' 'Apache-2.0' 'OFL-1.1')
    
      10options=('!lto')
    
      11depends=('ffmpeg' 'gcc-libs')
    
      12makedepends=('git' 'nodejs>=20.9' 'npm' 'rust')
    
      13provides=('biliup')
    
      14conflicts=('biliup' 'biliup-rs-bin')
    
      15
    
      16_upstream=biliup
    
      17_noto_cjk_commit=f8d157532fbfaeda587e826d4cd5b21a49186f7c
    
      18_google_fonts_commit=47d54ca1ebb14fd864695f1d39dc734f39017c33
    
      19
    
      20source=(
    
      21  "${_upstream}::git+https://github.com/biliup/biliup.git#branch=master"
    
      22  "NotoSansSC-Regular.otf::https://raw.githubusercontent.com/notofonts/noto-cjk/${_noto_cjk_commit}/Sans/OTF/SimplifiedChinese/NotoSansCJKsc-Regular.otf"
    
      23  "NotoEmoji.ttf::https://raw.githubusercontent.com/google/fonts/${_google_fonts_commit}/ofl/notoemoji/NotoEmoji%5Bwght%5D.ttf"
    
      24  "NotoSansCJK-OFL.txt::https://raw.githubusercontent.com/notofonts/noto-cjk/${_noto_cjk_commit}/Sans/LICENSE"
    
      25  "NotoEmoji-OFL.txt::https://raw.githubusercontent.com/google/fonts/${_google_fonts_commit}/ofl/notoemoji/OFL.txt"
    
      26)
    
      27sha256sums=(
    
      28  'SKIP'
    
      29  '2c76254f6fc379fddfce0a7e84fb5385bb135d3e399294f6eeb6680d0365b74b'
    
      30  'de6c18832938afc99caf132b39d6a30a19bac7f2e812e28db2535b4608d27551'
    
      31  '6a73f9541c2de74158c0e7cf6b0a58ef774f5a780bf191f2d7ec9cc53efe2bf2'
    
      32  '500bb1ccf43df7bbb522112f9133a52b16e1c35e809632f5d8609b179152de5b'
    
      33)
    
      34
    
      35pkgver() {
    
      36  cd "${srcdir}/${_upstream}"
    
      37  git describe --tags --long --abbrev=7 | sed -E 's/^v//; s/-([0-9]+)-g([0-9a-f]+)/.r\1.g\2/'
    
      38}
    
      39
    
      40build() {
    
      41  cd "${srcdir}/${_upstream}"
    
      42  npm ci --no-audit --no-fund --registry=https://registry.npmjs.org/ --replace-registry-host=always
    
      43  npm run build
    
      44  CARGO_TARGET_DIR="${srcdir}/target" cargo build --locked --release -p biliup-cli --bin biliup
    
      45}
    
      46
    
      47package() {
    
      48  install -Dm755 "${srcdir}/target/release/biliup" "${pkgdir}/usr/bin/biliup"
    
      49  install -Dm644 "${srcdir}/${_upstream}/README.md" "${pkgdir}/usr/share/doc/${pkgname}/README.md"
    
      50
    
      51  install -Dm644 "${srcdir}/NotoSansSC-Regular.otf" "${pkgdir}/usr/share/biliup/render-tools/fonts/NotoSansSC-Regular.otf"
    
      52  install -Dm644 "${srcdir}/NotoEmoji.ttf" "${pkgdir}/usr/share/biliup/render-tools/fonts/NotoEmoji.ttf"
    
      53  ln -s /usr/share/biliup/render-tools "${pkgdir}/usr/bin/render-tools"
    
      54
    
      55  install -Dm644 "${srcdir}/${_upstream}/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      56  install -Dm644 "${srcdir}/${_upstream}/crates/danmaku-factory/LICENSE-DanmakuFactory" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE-DanmakuFactory"
    
      57  install -Dm644 "${srcdir}/${_upstream}/crates/danmaku-factory/THIRD-PARTY-NOTICES.txt" "${pkgdir}/usr/share/licenses/${pkgname}/THIRD-PARTY-NOTICES.txt"
    
      58  install -Dm644 "${srcdir}/NotoSansCJK-OFL.txt" "${pkgdir}/usr/share/licenses/${pkgname}/NotoSansCJK-OFL.txt"
    
      59  install -Dm644 "${srcdir}/NotoEmoji-OFL.txt" "${pkgdir}/usr/share/licenses/${pkgname}/NotoEmoji-OFL.txt"
    
      60}
    
      61

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-30 07:55:24	Low	2