cinemion-bin

LOW

maintainer lucasion 0 votes scanned 2026-10-21 13:31:17.016028

View on AUR

Why flagged

The package downloads prebuilt binaries from the project's own GitHub releases, which is a normal AUR practice; the low severity is due to the limited trustworthiness of the source (few votes, recent upload), but no malicious behavior or unverifiable execution is present.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads prebuilt binaries from the project's own GitHub releases, which is a normal AUR practice; the low severity is due to the limited trustworthiness of the source (few votes, recent upload), but no malicious behavior or unverifiable execution is present.

PKGBUILD

      1# Maintainer: Lucasion <lucasion@hotmail.com>
    
      2pkgname=cinemion-bin
    
      3# The release name, which may hold a dash (2.0.0-alpha.0); pacman versions can't, so pkgver swaps it for an underscore
    
      4_version=0.3.0
    
      5pkgver=${_version//-/_}
    
      6pkgrel=1
    
      7pkgdesc="Self-hosted media server and player for movies, shows and home videos"
    
      8arch=('x86_64' 'aarch64')
    
      9url="https://github.com/LucasionGS/cinemion"
    
      10license=('GPL-3.0-or-later')
    
      11depends=('ffmpeg')
    
      12optdepends=(
    
      13  'intel-media-driver: video conversion on Intel GPUs (VA-API)'
    
      14  'vpl-gpu-rt: video conversion on Intel GPUs (Quick Sync)'
    
      15  'libva-mesa-driver: video conversion on AMD GPUs'
    
      16  'nvidia-utils: video conversion on NVIDIA GPUs (NVENC)'
    
      17  'poppler: covers for PDF books'
    
      18)
    
      19provides=('cinemion')
    
      20conflicts=('cinemion')
    
      21backup=('etc/cinemion/cinemion.env')
    
      22# The binary carries the app after its executable part; stripping it would cut that off
    
      23options=('!strip' '!debug')
    
      24source=('cinemion.service' 'cinemion.sysusers' 'cinemion.env')
    
      25source_x86_64=("cinemion-$_version-linux_x64.tar.gz::$url/releases/download/v$_version/cinemion-$_version-linux_x64.tar.gz")
    
      26source_aarch64=("cinemion-$_version-linux_arm64.tar.gz::$url/releases/download/v$_version/cinemion-$_version-linux_arm64.tar.gz")
    
      27# Filled in by scripts/aur-publish.sh (updpkgsums) once the release exists
    
      28sha256sums=('a2d5d91910dc5cf6e4bc458b1d5c1ea5ffb75d6e58a3f9949bf5e009f99c4191'
    
      29            '50583e653975c3d49f6d5fa3524318789eba9e6889d74520345fb2aae40c4d6b'
    
      30            '62d15bd61e114e83c21bbd54d30b7bc48a0c68a52ed33c7a1353adfa44c5a634')
    
      31sha256sums_x86_64=('6743fcbf6adb440f5c958bf2c29ff6f5aa4954f7a3d0819d1fc7c9a87232a4e2')
    
      32sha256sums_aarch64=('7e86063410ce133d621ca19d129326abe7c7e1f5f3bd44e0e1524caeeddfee5d')
    
      33
    
      34check() {
    
      35  [[ "$("$srcdir/cinemion" version)" == "$_version" ]]
    
      36}
    
      37
    
      38package() {
    
      39  install -Dm755 "$srcdir/cinemion" "$pkgdir/usr/bin/cinemion"
    
      40  install -Dm644 "$srcdir/cinemion.service" "$pkgdir/usr/lib/systemd/system/cinemion.service"
    
      41  install -Dm644 "$srcdir/cinemion.sysusers" "$pkgdir/usr/lib/sysusers.d/cinemion.conf"
    
      42  install -Dm640 "$srcdir/cinemion.env" "$pkgdir/etc/cinemion/cinemion.env"
    
      43  install -Dm644 "$srcdir/LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      44  install -Dm644 "$srcdir/README.md" "$pkgdir/usr/share/doc/$pkgname/README.md"
    
      45}
    
      46

Changes since previous scan

--- PKGBUILD @ 2026-10-21 11:31
+++ PKGBUILD @ 2026-10-21 13:31
@@ -1,7 +1,7 @@
 # Maintainer: Lucasion <lucasion@hotmail.com>
 pkgname=cinemion-bin
 # The release name, which may hold a dash (2.0.0-alpha.0); pacman versions can't, so pkgver swaps it for an underscore
-_version=0.2.0
+_version=0.3.0
 pkgver=${_version//-/_}
 pkgrel=1
 pkgdesc="Self-hosted media server and player for movies, shows and home videos"
@@ -28,8 +28,8 @@
 sha256sums=('a2d5d91910dc5cf6e4bc458b1d5c1ea5ffb75d6e58a3f9949bf5e009f99c4191'
             '50583e653975c3d49f6d5fa3524318789eba9e6889d74520345fb2aae40c4d6b'
             '62d15bd61e114e83c21bbd54d30b7bc48a0c68a52ed33c7a1353adfa44c5a634')
-sha256sums_x86_64=('f9211864ffdbf4b637bacdea7c1933c8f69ee78b137be786974b305864dec526')
-sha256sums_aarch64=('02bd437e66e61ca6fe29f58c7a97c7f3b0b2f09fd60fd2df58ed34f1a5998e8f')
+sha256sums_x86_64=('6743fcbf6adb440f5c958bf2c29ff6f5aa4954f7a3d0819d1fc7c9a87232a4e2')
+sha256sums_aarch64=('7e86063410ce133d621ca19d129326abe7c7e1f5f3bd44e0e1524caeeddfee5d')
 
 check() {
   [[ "$("$srcdir/cinemion" version)" == "$_version" ]]

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-21 13:31:17	Low	2
2026-10-21 11:31:16	Low	2
2026-10-21 00:12:50	Low	2
2026-10-20 21:29:05	Low	2
2026-10-20 19:28:13	Low	2