cosmic-audio-switch-git

maintainer heisenberg_1205 · 0 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged Package builds from its own git source hosted on the maintainer's GitHub, which is normal for AUR; the only concerns are low votes, recent upload, and skipped checksum, but it installs a single script from the built source without executing remote code or pulling prebuilt binaries.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): Package builds from its own git source hosted on the maintainer's GitHub, which is normal for AUR; the only concerns are low votes, recent upload, and skipped checksum, but it installs a single script from the built source without executing remote code or pulling prebuilt binaries.

PKGBUILD

1# Maintainer: Aditya Hebballe <adityahebballe@proton.me>
2
3pkgname=cosmic-audio-switch-git
4_srcname=cosmic-audio-switch
5pkgver=r1.g8635fa9
6pkgrel=1
7pkgdesc='Cycle selected PipeWire or PulseAudio outputs and show a COSMIC OSD'
8arch=('any')
9url='https://github.com/AdityaHebballe/cosmic-audio-switch'
10license=('unknown')
11depends=('bash' 'cosmic-external-osd-git' 'jq' 'libpulse' 'systemd')
12makedepends=('git')
13provides=('cosmic-audio-switch')
14conflicts=('cosmic-audio-switch')
15source=("${_srcname}::git+${url}.git")
16b2sums=('SKIP')
17
18pkgver() {
19 cd "${srcdir}/${_srcname}"
20 printf 'r%s.g%s' \
21 "$(git rev-list --count HEAD)" \
22 "$(git rev-parse --short HEAD)"
23}
24
25package() {
26 cd "${srcdir}/${_srcname}"
27 install -Dm755 audio-output-cycle "${pkgdir}/usr/bin/audio-output-cycle"
28}
29

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 05:14:03 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 19:12:33 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion