calfnxt
LOW
maintainer ademayo
0 votes
scanned 2026-11-06 04:11:17.291409
Why flagged
The package builds from source hosted on GitHub, uses a prebuilt UI from the same project's release assets, and includes the VST3 SDK via git with a skipped checksum; while the skipped checksum and recent upload are minor concerns, all components are from legitimate project repositories and no malicious behavior is evident.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from source hosted on GitHub, uses a prebuilt UI from the same project's release assets, and includes the VST3 SDK via git with a skipped checksum; while the skipped checksum and recent upload are minor concerns, all components are from legitimate project repositories and no malicious behavior is evident.
PKGBUILD
1
2
# Maintainer: Gus deMayo <gus.demayo@gmail.com>
3
pkgname=calfnxt
4
pkgver=2.16.0
5
pkgrel=1
6
pkgdesc="VST3 audio plugin suite with web-based UI"
7
arch=('x86_64')
8
url="https://github.com/boomshop/calfnxt"
9
license=('GPL-3.0-or-later')
10
11
depends=(
12
glibc
13
gcc-libs
14
gtk3
15
webkit2gtk-4.1
16
gtk4
17
webkitgtk-6.0
18
libx11
19
)
20
21
makedepends=(
22
cmake
23
ninja
24
pkgconf
25
python
26
git
27
)
28
29
source=(
30
"$pkgname-$pkgver.tar.gz::https://github.com/boomshop/calfnxt/archive/refs/tags/v$pkgver.tar.gz"
31
"calfnxt-ui-dist.tar.xz::https://github.com/boomshop/calfnxt/releases/download/v$pkgver/calfnxt-$pkgver-ui-dist.tar.xz"
32
"vst3sdk::git+https://github.com/steinbergmedia/vst3sdk.git#tag=v3.8.0_build_66"
33
)
34
35
sha256sums=(
36
'6813d20270526346f5ee8977df65584b309fc026abdad56769b4810313dbe06a'
37
'c8030bca8649681cbcea8f430d54bc3c0ee07d5a9520476bf1d93902f9cbf033'
38
'SKIP'
39
)
40
41
42
prepare() {
43
local _src="$srcdir/calfnxt-$pkgver"
44
local _sdk="$srcdir/vst3sdk"
45
46
cd "$_src"
47
48
# Correct all VST3 SDK submodule URLs.
49
cat > "$_sdk/.gitmodules" <<'EOF'
50
[submodule "base"]
51
path = base
52
url = https://github.com/steinbergmedia/vst3_base.git
53
[submodule "cmake"]
54
path = cmake
55
url = https://github.com/steinbergmedia/vst3_cmake.git
56
[submodule "doc"]
57
path = doc
58
url = https://github.com/steinbergmedia/vst3_doc.git
59
[submodule "pluginterfaces"]
60
path = pluginterfaces
61
url = https://github.com/steinbergmedia/vst3_pluginterfaces.git
62
[submodule "public.sdk"]
63
path = public.sdk
64
url = https://github.com/steinbergmedia/vst3_public_sdk.git
65
[submodule "tutorials"]
66
path = tutorials
67
url = https://github.com/steinbergmedia/vst3_tutorials.git
68
[submodule "vstgui4"]
69
path = vstgui4
70
url = https://github.com/steinbergmedia/vstgui.git
71
EOF
72
73
# Remove stale local URL configuration.
74
git -C "$_sdk" config --local --remove-section submodule.base 2>/dev/null || true
75
git -C "$_sdk" config --local --remove-section submodule.cmake 2>/dev/null || true
76
git -C "$_sdk" config --local --remove-section submodule.doc 2>/dev/null || true
77
git -C "$_sdk" config --local --remove-section submodule.pluginterfaces 2>/dev/null || true
78
git -C "$_sdk" config --local --remove-section submodule.public.sdk 2>/dev/null || true
79
git -C "$_sdk" config --local --remove-section submodule.tutorials 2>/dev/null || true
80
git -C "$_sdk" config --local --remove-section submodule.vstgui4 2>/dev/null || true
81
82
# Synchronize corrected URLs.
83
git -C "$_sdk" submodule sync --recursive
84
85
# Initialize SDK dependencies.
86
git -C "$_sdk" submodule update --init --recursive
87
88
# Link SDK into project.
89
mkdir -p "$_src/external"
90
rm -rf "$_src/external/vst3sdk"
91
ln -s "$_sdk" "$_src/external/vst3sdk"
92
93
# Extract prebuilt WebUI.
94
tar -xf "$srcdir/calfnxt-ui-dist.tar.xz" -C "$_src"
95
96
# Validate UI.
97
[[ -f "$_src/ui/dist/.stamp" ]] || {
98
error "Prebuilt UI missing ui/dist/.stamp"
99
return 1
100
}
101
102
# Validate SDK.
103
[[ -f "$_sdk/CMakeLists.txt" ]] || {
104
error "VST3 SDK CMakeLists.txt missing"
105
return 1
106
}
107
}
108
109
110
build() {
111
cd "$srcdir/calfnxt-$pkgver"
112
113
cmake -S . -B build -G Ninja \
114
-DCMAKE_BUILD_TYPE=Release \
115
-DCMAKE_INSTALL_PREFIX=/usr \
116
-DCMAKE_INSTALL_LIBDIR=lib \
117
-DCALFNXT_USE_PREBUILT_UI=ON \
118
-DCALFNXT_WEB_HOST_GTK4=ON \
119
-DCALFNXT_VST3_INSTALL_DIR=lib/vst3 \
120
-DSMTG_ENABLE_VSTGUI_SUPPORT=OFF
121
122
cmake --build build \
123
--target calfnxt-plugins \
124
--parallel "$(nproc)"
125
}
126
127
package() {
128
cd "$srcdir/calfnxt-$pkgver"
129
130
DESTDIR="$pkgdir" \
131
cmake --install build --prefix /usr
132
133
install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
134
install -Dm644 COPYRIGHT "$pkgdir/usr/share/licenses/$pkgname/COPYRIGHT"
135
}
136
137
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-06 04:11:17 | Low | 2 |