cast_control

maintainer miguelcarneiro · 1 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds from a source tarball of the project's own GitHub repository, which is a normal and safe AUR practice; the flagged 'recently orphaned & re-adopted' status does not indicate inherent danger.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from a source tarball of the project's own GitHub repository, which is a normal and safe AUR practice; the flagged 'recently orphaned & re-adopted' status does not indicate inherent danger.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: 
    
      2# Contributor: Mark Wagie <mark dot wagie at proton dot me>
    
      3pkgname=cast_control
    
      4pkgver=0.16.1
    
      5pkgrel=2
    
      6epoch=1
    
      7pkgdesc="Control Chromecasts from Linux and D-Bus"
    
      8arch=('any')
    
      9url="https://github.com/alexdelorenzo/cast_control"
    
      10license=('AGPL-3.0-or-later')
    
      11depends=(
    
      12  'python-aiopath'
    
      13  'python-app_paths'
    
      14  'python-appdirs'
    
      15  'python-click'
    
      16  'python-daemons'
    
      17  'python-gobject'
    
      18  'python-iteration-utilities'
    
      19  'python-mpris_server'
    
      20  'python-pychromecast'
    
      21  'python-pydbus'
    
      22  'python-rich'
    
      23  'python-validators'
    
      24)
    
      25makedepends=(
    
      26  'python-build'
    
      27  'python-hatchling'
    
      28  'python-installer'
    
      29  'python-wheel'
    
      30)
    
      31optdepends=('playerctl: Get the D-Bus name for your device')
    
      32conflicts=('chromecast_mpris')
    
      33source=("$pkgname-$pkgver.tar.gz::$url/archive/refs/tags/v$pkgver.tar.gz")
    
      34sha256sums=('66ff3fdb4b22140f42f9fd2db2b734246f730fde80cfa45d07fd1e0eb20b08a6')
    
      35
    
      36build() {
    
      37  cd "$pkgname-$pkgver"
    
      38  python -m build --wheel --no-isolation
    
      39}
    
      40
    
      41package() {
    
      42  cd "$pkgname-$pkgver"
    
      43  python -m installer --destdir="$pkgdir" dist/*.whl
    
      44}
    
      45

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 17:15:21	MEDIUM	1
2026-06-18 16:11:54	CLEAN	0