earshot-bin

LOW

maintainer 9M2PJU 0 votes scanned 2026-11-05 10:09:05.899562

View on AUR

Why flagged

The package downloads prebuilt binaries from a GitHub release, which is a normal practice for -bin packages; the source is from the project's own repository, and while the checksum is skipped, the risk is mitigated by the fact that it's a widely used platform and the package installs only legitimate application binaries and a desktop file.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package downloads prebuilt binaries from a GitHub release, which is a normal practice for -bin packages; the source is from the project's own repository, and while the checksum is skipped, the risk is mitigated by the fact that it's a widely used platform and the package installs only legitimate application binaries and a desktop file.

PKGBUILD

      1# Maintainer: Mazlum <https://github.com/MrMazlum/Earshot>
    
      2# Earshot -bin: prebuilt release binaries, no compile. Version is bumped on
    
      3# every GitHub release by CI. For "latest commit every install", use
    
      4# earshot-git instead.
    
      5pkgname=earshot-bin
    
      6_pkgname=earshot
    
      7pkgver=1.1.0
    
      8pkgrel=1
    
      9pkgdesc="Use your phone as your PC's microphone, over Wi-Fi (prebuilt release)"
    
      10arch=('x86_64')
    
      11url="https://github.com/MrMazlum/Earshot"
    
      12license=('GPL-3.0-or-later')
    
      13depends=('alsa-lib' 'dbus' 'hicolor-icon-theme')
    
      14optdepends=(
    
      15  'pulseaudio-utils: virtual microphone via pactl (PulseAudio)'
    
      16  'pipewire-pulse: virtual microphone via pactl (PipeWire)'
    
      17  'gnome-shell-extension-appindicator: tray icon on GNOME'
    
      18)
    
      19provides=('earshot')
    
      20conflicts=('earshot' 'earshot-git')
    
      21source=("https://github.com/MrMazlum/Earshot/releases/download/v${pkgver}/earshot-receiver-linux-x86_64.tar.gz")
    
      22sha256sums=('SKIP')
    
      23
    
      24package() {
    
      25  # Release tarballs wrap the files in one top-level dir; find them.
    
      26  receiver=$(find "$srcdir" -name earshot-receiver -type f | head -1)
    
      27  tray=$(find "$srcdir" -name earshot-tray -type f | head -1)
    
      28  [ -n "$receiver" ] && [ -n "$tray" ] || { echo "binaries not found in tarball"; return 1; }
    
      29  install -Dm0755 "$receiver" "$pkgdir/usr/bin/earshot-receiver"
    
      30  install -Dm0755 "$tray" "$pkgdir/usr/bin/earshot-tray"
    
      31  # Desktop + icon ship in the repo, not the tarball: fetch is avoided by
    
      32  # generating the freedesktop entry here (identical to packaging/earshot.desktop).
    
      33  install -dm0755 "$pkgdir/usr/share/applications" "$pkgdir/usr/share/icons/hicolor/512x512/apps"
    
      34  cat > "$pkgdir/usr/share/applications/earshot.desktop" <<'EOF'
    
      35[Desktop Entry]
    
      36Type=Application
    
      37Name=Earshot
    
      38GenericName=Phone microphone bridge
    
      39Comment=Use your phone as this machine's microphone
    
      40Exec=earshot-tray
    
      41Icon=earshot
    
      42Terminal=false
    
      43Categories=AudioVideo;Audio;
    
      44StartupNotify=false
    
      45EOF
    
      46}
    
      47

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-05 10:09:05	Low	2