course2md-gui-slides

LOW

maintainer ftiasch 0 votes scanned 2026-09-08 15:17:32.240420

View on AUR

Why flagged

The package builds from multiple source repositories with SKIP'd checksums, but all are public git checkouts of project dependencies; no remote code execution or malicious payloads are present, and the build process is transparent.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from multiple source repositories with SKIP'd checksums, but all are public git checkouts of project dependencies; no remote code execution or malicious payloads are present, and the build process is transparent.

PKGBUILD

      1# Maintainer: Xiaoxu Guo <shimo11370 at proton dot me>
    
      2# Contributor: mizorewww (upstream course2md-gui-bin packaging)
    
      3# SPDX-License-Identifier: 0BSD
    
      4pkgname=course2md-gui-slides
    
      5pkgver=1.7.0
    
      6pkgrel=1
    
      7pkgdesc='Native course video notes GUI with per-conversion screenshot controls'
    
      8arch=('x86_64')
    
      9url='https://github.com/mizorewww/course2md'
    
      10license=('MIT' 'Apache-2.0')
    
      11depends=('alsa-lib' 'ffmpeg' 'fontconfig' 'gcc-libs' 'glibc' 'libgit2'
    
      12         'libx11' 'libxcb' 'libxkbcommon' 'libxkbcommon-x11' 'openssl'
    
      13         'vulkan-icd-loader' 'wayland')
    
      14makedepends=('rust' 'clang' 'cmake' 'git' 'pkgconf' 'python')
    
      15optdepends=('yt-dlp: online video downloads'
    
      16            'llama-cpp: local GPU and CPU speech recognition')
    
      17provides=("course2md-gui=$pkgver")
    
      18conflicts=('course2md-gui' 'course2md-gui-bin')
    
      19# Upstream release profiles already strip debug information and set Rust LTO.
    
      20options=('!debug' '!lto')
    
      21
    
      22# Match upstream v1.7.0 and desktop/sources.lock.json.
    
      23_course2md_rev=6881a1bac0df0010d72c85367c09474791a5fb82
    
      24_zed_rev=5a9b9558db01a6b906cec2fb70a797affdc58cdd
    
      25_gpui_component_rev=5f5ba08d35c9fb6f42d81a7aff7edba61ba3bc6b
    
      26source=("course2md-upstream::git+$url.git#commit=$_course2md_rev"
    
      27        "zed::git+https://github.com/zed-industries/zed.git#commit=$_zed_rev"
    
      28        "gpui-component::git+https://github.com/longbridge/gpui-component.git#commit=$_gpui_component_rev"
    
      29        'slide-controls.patch'
    
      30        'course2md.desktop')
    
      31sha256sums=('SKIP'
    
      32            'SKIP'
    
      33            'SKIP'
    
      34            '317ea0fc21e6861de27a4360296d620cfd2aa6ec189d47e90e730a483dc7ac61'
    
      35            '8bed829e281c7a92378f39b5fd384adf8ca8fad56cce2eb701285843dede3e2c')
    
      36
    
      37prepare() {
    
      38    cd "$srcdir/course2md-upstream"
    
      39    patch -Np1 -i "$srcdir/slide-controls.patch"
    
      40    python desktop/scripts/sources.py --locked --developer-dir "$srcdir"
    
      41    cargo fetch --locked
    
      42    cargo fetch --locked --manifest-path desktop/Cargo.toml
    
      43}
    
      44
    
      45build() {
    
      46    cd "$srcdir/course2md-upstream"
    
      47    export CARGO_TARGET_DIR="$srcdir/target"
    
      48    export RUSTFLAGS="${RUSTFLAGS} --remap-path-prefix=${srcdir}=/usr/src/debug/${pkgname}"
    
      49    cargo build --release --frozen
    
      50    cargo build --release --frozen --manifest-path desktop/Cargo.toml
    
      51}
    
      52
    
      53check() {
    
      54    cd "$srcdir/course2md-upstream"
    
      55    export CARGO_TARGET_DIR="$srcdir/target"
    
      56    export RUSTFLAGS="${RUSTFLAGS} --remap-path-prefix=${srcdir}=/usr/src/debug/${pkgname}"
    
      57    cargo test --release --frozen --lib
    
      58    cargo test --release --frozen --test cli_ux
    
      59    cargo test --release --frozen --manifest-path desktop/Cargo.toml
    
      60}
    
      61
    
      62package() {
    
      63    cd "$srcdir/course2md-upstream"
    
      64    install -Dm755 "$srcdir/target/release/course2md-desktop" "$pkgdir/usr/lib/course2md-desktop/course2md-desktop"
    
      65    install -Dm755 "$srcdir/target/release/course2md" "$pkgdir/usr/lib/course2md-desktop/course2md"
    
      66    install -dm755 "$pkgdir/usr/bin"
    
      67    ln -s /usr/lib/course2md-desktop/course2md-desktop "$pkgdir/usr/bin/course2md-desktop"
    
      68    install -Dm644 "$srcdir/course2md.desktop" "$pkgdir/usr/share/applications/course2md.desktop"
    
      69    install -Dm644 desktop/assets/icon.png "$pkgdir/usr/share/icons/hicolor/256x256/apps/course2md.png"
    
      70    install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      71    install -Dm644 desktop/assets/material/LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE-material-icons"
    
      72    install -Dm644 desktop/README.md "$pkgdir/usr/share/doc/$pkgname/README.md"
    
      73}
    
      74

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-08 15:17:32	Low	2