earshot-git

LOW

maintainer 9M2PJU 0 votes scanned 2026-11-05 10:09:05.899562

View on AUR

Why flagged

The package builds from the project's own git repository, which is normal for -git AUR packages; the low severity is due to few votes and recent upload, not malicious content.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from the project's own git repository, which is normal for -git AUR packages; the low severity is due to few votes and recent upload, not malicious content.

PKGBUILD

      1# Maintainer: Mazlum <https://github.com/MrMazlum/Earshot>
    
      2# Earshot -git: always builds the tip of main, so reinstalling always gives
    
      3# you the latest commit. For the pinned release binary without compiling,
    
      4# use earshot-bin instead.
    
      5pkgname=earshot-git
    
      6_pkgname=earshot
    
      7pkgver=1.1.0.r39.g3d6ebd2
    
      8pkgrel=1
    
      9pkgdesc="Use your phone as your PC's microphone, over Wi-Fi (latest git)"
    
      10arch=('x86_64')
    
      11url="https://github.com/MrMazlum/Earshot"
    
      12license=('GPL-3.0-or-later')
    
      13depends=('alsa-lib' 'dbus' 'hicolor-icon-theme')
    
      14makedepends=('git' 'cargo' 'cmake' 'pkgconf' 'alsa-lib' 'dbus')
    
      15optdepends=(
    
      16  'pulseaudio-utils: virtual microphone via pactl (PulseAudio)'
    
      17  'pipewire-pulse: virtual microphone via pactl (PipeWire)'
    
      18  'gnome-shell-extension-appindicator: tray icon on GNOME'
    
      19)
    
      20provides=('earshot')
    
      21conflicts=('earshot' 'earshot-bin')
    
      22source=("git+https://github.com/MrMazlum/Earshot.git")
    
      23sha256sums=('SKIP')
    
      24
    
      25pkgver() {
    
      26  cd "$_pkgname"
    
      27  # Single source of truth is receiver/Cargo.toml; suffix counts commits
    
      28  # since the v<version> tag so the version always moves forward.
    
      29  ver=$(sed -n 's/^version *= *"\([^"]*\)".*/\1/p' receiver/Cargo.toml | head -1)
    
      30  printf '%s.r%s.g%s' "$ver" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
    
      31}
    
      32
    
      33build() {
    
      34  cd "$_pkgname/receiver"
    
      35  cargo build --release --locked
    
      36}
    
      37
    
      38package() {
    
      39  cd "$_pkgname"
    
      40  install -Dm0755 receiver/target/release/earshot-receiver "$pkgdir/usr/bin/earshot-receiver"
    
      41  install -Dm0755 receiver/target/release/earshot-tray "$pkgdir/usr/bin/earshot-tray"
    
      42  install -Dm0644 packaging/earshot.desktop "$pkgdir/usr/share/applications/earshot.desktop"
    
      43  install -Dm0644 docs/icon.png "$pkgdir/usr/share/icons/hicolor/512x512/apps/earshot.png"
    
      44  install -Dm0644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      45}
    
      46

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-05 10:09:05	Low	2