eddie-git

LOW

maintainer Burgess 0 votes scanned 2026-11-06 04:11:17.291409

View on AUR

Why flagged

The package builds from a public Git repository with a SKIP'd checksum, but sources are from the project's own GitHub, and no untrusted prebuilt binaries or remote code execution are involved; low risk due to lack of verifiable source integrity.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a public Git repository with a SKIP'd checksum, but sources are from the project's own GitHub, and no untrusted prebuilt binaries or remote code execution are involved; low risk due to lack of verifiable source integrity.

PKGBUILD

      1# Maintainer: Jacob Burgess
    
      2pkgname=eddie-git
    
      3_pkgname=eddie
    
      4pkgver=r104.c5be7de
    
      5pkgrel=1
    
      6pkgdesc="The editor that watches the footage for you: a native Rust video editor with Meta's models built in"
    
      7arch=('x86_64')
    
      8url="https://github.com/BurgessTG/eddie"
    
      9license=('MIT' 'Apache-2.0')
    
      10depends=('ffmpeg' 'gtk3' 'glib2' 'alsa-lib' 'fontconfig' 'gcc-libs' 'glibc'
    
      11         'libxkbcommon' 'wayland' 'libx11' 'vulkan-icd-loader')
    
      12makedepends=('git' 'cargo' 'clang' 'cmake' 'pkgconf')
    
      13optdepends=('inter-font: the interface font Eddie is designed with'
    
      14            'xdg-utils: Open folder after an export')
    
      15provides=('eddie')
    
      16conflicts=('eddie')
    
      17options=('!lto' '!debug')
    
      18source=("$_pkgname::git+$url.git")
    
      19sha256sums=('SKIP')
    
      20
    
      21pkgver() {
    
      22  cd "$_pkgname"
    
      23  printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
    
      24}
    
      25
    
      26prepare() {
    
      27  cd "$_pkgname"
    
      28  export RUSTUP_TOOLCHAIN=stable
    
      29  cargo fetch --locked --target "$(rustc -vV | sed -n 's/host: //p')"
    
      30}
    
      31
    
      32build() {
    
      33  cd "$_pkgname"
    
      34  export RUSTUP_TOOLCHAIN=stable
    
      35  export CARGO_TARGET_DIR=target
    
      36  # Keep build paths out of the binary (makepkg flags this).
    
      37  export RUSTFLAGS="${RUSTFLAGS:-} --remap-path-prefix=$srcdir=/build"
    
      38  # whisper.cpp and QuickJS embed __FILE__ paths.
    
      39  export CFLAGS="${CFLAGS:-} -ffile-prefix-map=$srcdir=/build"
    
      40  export CXXFLAGS="${CXXFLAGS:-} -ffile-prefix-map=$srcdir=/build"
    
      41  cargo build --frozen --release -p openreel-app --bin eddie
    
      42}
    
      43
    
      44package() {
    
      45  cd "$_pkgname"
    
      46  install -Dm755 target/release/eddie "$pkgdir/usr/bin/eddie"
    
      47  install -Dm644 packaging/eddie.desktop "$pkgdir/usr/share/applications/eddie.desktop"
    
      48  for size in 256 512; do
    
      49    install -Dm644 "packaging/eddie-$size.png" \
    
      50      "$pkgdir/usr/share/icons/hicolor/${size}x${size}/apps/eddie.png"
    
      51  done
    
      52  install -Dm644 LICENSE-MIT "$pkgdir/usr/share/licenses/$pkgname/LICENSE-MIT"
    
      53  install -Dm644 LICENSE-APACHE "$pkgdir/usr/share/licenses/$pkgname/LICENSE-APACHE"
    
      54}
    
      55

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-06 04:11:17	Low	2