desktube-bin

maintainer kristyancarvalho · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal AUR practice; the low severity is due to the unverifiable binary from a non-whitelisted host, but it is not actively malicious or obfuscated.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal AUR practice; the low severity is due to the unverifiable binary from a non-whitelisted host, but it is not actively malicious or obfuscated.

PKGBUILD

      1# Maintainer: Kristyan Carvalho <kristyancarvalho@hotmail.com>
    
      2
    
      3pkgname=desktube-bin
    
      4pkgver=1.0.1
    
      5pkgrel=1
    
      6pkgdesc="Control YouTube on your computer from your phone, over your local network"
    
      7arch=('x86_64')
    
      8url="https://github.com/kristyancarvalho/desktube"
    
      9license=('MPL-2.0')
    
      10provides=('desktube')
    
      11conflicts=('desktube')
    
      12depends=('gtk3' 'nss' 'alsa-lib' 'libxtst' 'libnotify')
    
      13options=('!strip' '!debug')
    
      14source=("DeskTube-${pkgver}-linux-x86_64.tar.gz::${url}/releases/download/v${pkgver}/DeskTube-${pkgver}-linux-x86_64.tar.gz")
    
      15sha256sums=('2736d5a544760a3bb7af40eac2375597569ca90c3caf1bf900340f6fbb94f9cc')
    
      16
    
      17package() {
    
      18  local appdir
    
      19  appdir="$(dirname "$(find "$srcdir" -maxdepth 3 -type f -name desktube -print -quit)")"
    
      20
    
      21  install -dm755 "$pkgdir/opt/desktube"
    
      22  cp -a "$appdir"/. "$pkgdir/opt/desktube/"
    
      23
    
      24  if [ -e "$pkgdir/opt/desktube/chrome-sandbox" ]; then
    
      25    chmod 4755 "$pkgdir/opt/desktube/chrome-sandbox"
    
      26  fi
    
      27
    
      28  install -dm755 "$pkgdir/usr/bin"
    
      29  cat >"$pkgdir/usr/bin/desktube" <<'EOF'
    
      30#!/bin/sh
    
      31exec /opt/desktube/desktube "$@"
    
      32EOF
    
      33  chmod 755 "$pkgdir/usr/bin/desktube"
    
      34
    
      35  install -dm755 "$pkgdir/usr/share/applications"
    
      36  cat >"$pkgdir/usr/share/applications/desktube.desktop" <<'EOF'
    
      37[Desktop Entry]
    
      38Name=DeskTube
    
      39GenericName=YouTube Remote
    
      40Comment=Control YouTube on your computer from your phone
    
      41Exec=desktube %U
    
      42Icon=desktube
    
      43Terminal=false
    
      44Type=Application
    
      45Categories=AudioVideo;Network;
    
      46Keywords=youtube;remote;video;player;
    
      47StartupWMClass=DeskTube
    
      48EOF
    
      49
    
      50  if [ -e "$pkgdir/opt/desktube/resources/icon.png" ]; then
    
      51    install -Dm644 "$pkgdir/opt/desktube/resources/icon.png" \
    
      52      "$pkgdir/usr/share/icons/hicolor/512x512/apps/desktube.png"
    
      53  fi
    
      54
    
      55  local res="$pkgdir/opt/desktube/resources"
    
      56  if [ -e "$res/LICENSE" ]; then
    
      57    install -Dm644 "$res/LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      58  fi
    
      59  if [ -e "$res/NOTICE" ]; then
    
      60    install -Dm644 "$res/NOTICE" "$pkgdir/usr/share/licenses/$pkgname/NOTICE"
    
      61  fi
    
      62  if [ -e "$res/THIRD_PARTY_NOTICES.md" ]; then
    
      63    install -Dm644 "$res/THIRD_PARTY_NOTICES.md" \
    
      64      "$pkgdir/usr/share/licenses/$pkgname/THIRD_PARTY_NOTICES.md"
    
      65  fi
    
      66}
    
      67

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 05:10:22	LOW	2