doubao-input-git

LOW

maintainer 111qqz 0 votes scanned 2026-09-16 15:22:50.295451

View on AUR

Why flagged

The package builds from a public Git repository with a SKIP'd checksum, but it is a legitimate source for a development snapshot; the installed code is Python-based and not obfuscated, with no evidence of remote code execution or data exfiltration.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a public Git repository with a SKIP'd checksum, but it is a legitimate source for a development snapshot; the installed code is Python-based and not obfuscated, with no evidence of remote code execution or data exfiltration.

PKGBUILD

      1# Maintainer: atang-sp <atang.sp.2025@gmail.com>
    
      2
    
      3pkgname=doubao-input-git
    
      4pkgver=1.0.2.r34.g98ce357
    
      5pkgrel=3
    
      6pkgdesc="Global push-to-hold voice input for Wayland, backed by Doubao ASR"
    
      7arch=('any')
    
      8url="https://github.com/wurong98/doubao-input-for-linux"
    
      9license=('MIT')
    
      10depends=(
    
      11  'gtk4'
    
      12  'hicolor-icon-theme'
    
      13  'python'
    
      14  'python-cairo'
    
      15  'python-evdev'
    
      16  'python-gobject'
    
      17  'python-sounddevice'
    
      18  'python-websockets'
    
      19  'webkitgtk-6.0'
    
      20  'wl-clipboard'
    
      21)
    
      22makedepends=(
    
      23  'git'
    
      24  'python-build'
    
      25  'python-installer'
    
      26  'python-setuptools'
    
      27  'python-wheel'
    
      28)
    
      29provides=('doubao-input')
    
      30conflicts=('doubao-input')
    
      31install=doubao-input.install
    
      32source=(
    
      33  "doubao-input::git+${url}.git"
    
      34  'doubao-input.service'
    
      35  '70-doubao-input-uinput.rules'
    
      36  'evdev-2-list-devices.patch'
    
      37)
    
      38sha256sums=(
    
      39  'SKIP'
    
      40  '6e935d832da2c0f1f5adf81bcd587abe97c80c97a5beaf01883b8434cdb05a79'
    
      41  'c71e03ce761e98fa0c0a49dde3956336c2f2a47d4f44ba464a7ad6c5d89c0403'
    
      42  '9ce153f09b7d5c75f651c8d3ff657ddd363e76b9b03aaba051049c3f2f0ae643'
    
      43)
    
      44
    
      45pkgver() {
    
      46  cd doubao-input
    
      47  printf '1.0.2.r%s.g%s' \
    
      48    "$(git rev-list --count HEAD)" \
    
      49    "$(git rev-parse --short=7 HEAD)"
    
      50}
    
      51
    
      52prepare() {
    
      53  cd doubao-input
    
      54  patch -Np1 -i "$srcdir/evdev-2-list-devices.patch"
    
      55}
    
      56
    
      57build() {
    
      58  cd doubao-input
    
      59  python -m build --wheel --no-isolation
    
      60}
    
      61
    
      62package() {
    
      63  cd doubao-input
    
      64
    
      65  python -m installer --destdir="$pkgdir" dist/*.whl
    
      66
    
      67  install -Dm644 "$srcdir/doubao-input.service" \
    
      68    "$pkgdir/usr/lib/systemd/user/doubao-input.service"
    
      69  install -Dm644 debian/doubao-input.desktop \
    
      70    "$pkgdir/usr/share/applications/doubao-input.desktop"
    
      71  install -Dm644 "$srcdir/70-doubao-input-uinput.rules" \
    
      72    "$pkgdir/usr/lib/udev/rules.d/70-doubao-input-uinput.rules"
    
      73
    
      74  install -Dm644 src/doubao_input/resources/logo-128.png \
    
      75    "$pkgdir/usr/share/icons/hicolor/128x128/apps/doubao-input.png"
    
      76
    
      77  install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      78  install -Dm644 README.md NOTICE -t "$pkgdir/usr/share/doc/$pkgname"
    
      79}
    
      80

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-16 15:22:50	Low	2