dragon-media-backend-git

LOW

maintainer IslandC0der 0 votes scanned 2026-10-28 03:49:04.808433

View on AUR

Why flagged

The package builds from a legitimate KDE project Git repository and includes a single header file from an official GitHub source; the only concerns are unverified sources due to SKIP'd checksum and recent upload with few votes, but no malicious behavior is present.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a legitimate KDE project Git repository and includes a single header file from an official GitHub source; the only concerns are unverified sources due to SKIP'd checksum and recent upload with few votes, but no malicious behavior is present.

PKGBUILD

      1# Maintainer: João Figueiredo <jf.mundox@gmail.com>
    
      2
    
      3pkgname=dragon-media-backend-git
    
      4pkgver=0.83.0_r428.g049f78a
    
      5pkgrel=1
    
      6pkgdesc='Qt C++ library intended for desktop music players'
    
      7url="https://invent.kde.org/libraries/${pkgname%-git}"
    
      8arch=($CARCH)
    
      9license=(BSD-3-Clause)
    
      10depends=(ffmpeg kissfft sdl3 kcoreaddons-git ki18n-git kio-git qt6-base qt6-declarative)
    
      11optdepends=('libpipewire: PipeWire integration'
    
      12            'libpulse: PulseAudio integration')
    
      13makedepends=(git extra-cmake-modules-git libpipewire libpulse)
    
      14conflicts=(${pkgname%-git})
    
      15provides=(${pkgname%-git})
    
      16source=("git+$url.git"
    
      17         https://raw.githubusercontent.com/mborgerding/kissfft/refs/heads/master/kissfft.hh) # The kissfft package is missing this header
    
      18sha256sums=('SKIP'
    
      19            '0a31467599b981d784f53a944c19e6991aa96eee703ab424d648e436b2718a8d')
    
      20pkgver() {
    
      21  cd ${pkgname%-git}
    
      22  _ver="$(grep -Em1 ' +VERSION' CMakeLists.txt | sed 's/.* //' | cut -d '"' -f2 | tr - .)"
    
      23  echo "${_ver}_r$(git rev-list --count HEAD).g$(git rev-parse --short HEAD)"
    
      24}
    
      25
    
      26build() {
    
      27  cmake -B build -S ${pkgname%-git} \
    
      28    -DCMAKE_CXX_FLAGS="-I$srcdir" # Include the missing header
    
      29  cmake --build build
    
      30}
    
      31
    
      32package() {
    
      33  DESTDIR="$pkgdir" cmake --install build
    
      34}
    
      35

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-28 03:49:04	Low	2