ears-bin
Package installs a prebuilt .deb from GitHub releases, which is normal for AUR binary packages; source is from the project's official repository, and payload is a legitimate application binary, not data or code executed remotely.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): Package installs a prebuilt .deb from GitHub releases, which is normal for AUR binary packages; source is from the project's official repository, and payload is a legitimate application binary, not data or code executed remotely.
PKGBUILD
# Maintainer: dvjn <git@dvjn.dev>
pkgname=ears-bin
pkgver=0.2.1
pkgrel=1
pkgdesc="Voice dictation: press a hotkey, speak, and ears types what you said"
arch=('x86_64')
url="https://github.com/dvjn/ears"
license=('MIT')
depends=('webkit2gtk-4.1' 'gtk3' 'libayatana-appindicator' 'alsa-lib')
optdepends=(
'pipewire-pulse: pick a microphone by name (or a PulseAudio server)'
'grim: screen text as context on wlroots compositors'
'xdg-desktop-portal: screen text as context on other desktops'
'ears-stt: local speech-to-text server'
'ears-llm: local clean-up language model server'
)
provides=('ears')
conflicts=('ears')
options=('!debug')
install=ears-bin.install
source=("ears_${pkgver}_amd64.deb::$url/releases/download/v$pkgver/ears_${pkgver}_amd64.deb"
"LICENSE-$pkgver::https://raw.githubusercontent.com/dvjn/ears/v$pkgver/LICENSE")
sha256sums=('edcc671008cc2c82f64f5a74e89845d3ac643e79630045ae0c53f9e7583e7a20' '8130265ac5f616e5ea648f8f93e2f8c332f90fb95ab898fe9175367abac2daf7')
package() {
bsdtar -xf data.tar.* -C "$pkgdir"
install -Dm644 "LICENSE-$pkgver" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-20 17:28:05 | Low | 2 |