faro

LOW

maintainer harababurel 0 votes scanned 2026-10-19 15:25:12.467407

View on AUR

Why flagged

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: Sergiu Puscas <srg.pscs@gmail.com>
    
      2
    
      3pkgname=faro
    
      4_pkgname=faro
    
      5pkgver=0.1.2
    
      6pkgrel=1
    
      7pkgdesc='Terminal client for Signal, built for people who live in tmux'
    
      8arch=('x86_64' 'aarch64')
    
      9url='https://getfaro.dev'
    
      10license=('AGPL-3.0-only' 'MIT')
    
      11# openssl: presage's store is SQLCipher, which links libcrypto on Linux.
    
      12# The release build links it dynamically (the vendored-openssl feature is
    
      13# only for dist's prebuilt archives, which faro-bin installs).
    
      14depends=('glibc' 'libgcc' 'openssl')
    
      15makedepends=('cargo' 'protobuf' 'cmake' 'clang')
    
      16optdepends=(
    
      17  'xdg-utils: open links and attachments'
    
      18  'mpv: play voice notes (or ffmpeg, pipewire, alsa-utils)'
    
      19  'ffmpeg: read voice notes that are not WAV'
    
      20  'python-openai-whisper: transcribe voice notes locally (the default command)'
    
      21  'whisper-cpp: transcribe voice notes locally (whisper-cli)'
    
      22  'libsecret: read the remote transcription API key from the keyring'
    
      23)
    
      24# The release profile strips the binary, so a -debug package would be empty.
    
      25options=('!lto' '!debug')
    
      26source=("$_pkgname-$pkgver.tar.gz::https://github.com/harababurel/faro/archive/refs/tags/v$pkgver.tar.gz")
    
      27sha256sums=('a0c0eba6c468ce560e55148ddaa1a355ca1148f51946b1b048b84da68eed21ec')
    
      28
    
      29# The GitHub tarball has no .git, so build.rs falls back to the bare
    
      30# version line ("0.1.0"); set FARO_BUILD_COMMIT/FARO_BUILD_DATE in build()
    
      31# if a fuller line is ever wanted.
    
      32
    
      33prepare() {
    
      34  cd "$_pkgname-$pkgver"
    
      35  export RUSTUP_TOOLCHAIN=stable
    
      36  cargo fetch --locked --target "$(rustc -vV | sed -n 's/host: //p')"
    
      37}
    
      38
    
      39build() {
    
      40  cd "$_pkgname-$pkgver"
    
      41  export RUSTUP_TOOLCHAIN=stable
    
      42  export CARGO_TARGET_DIR=target
    
      43  # Keep the build directory out of the binary (panic messages embed source paths).
    
      44  export RUSTFLAGS="${RUSTFLAGS:-} --remap-path-prefix=$srcdir=/"
    
      45  cargo build --frozen --release --package faro
    
      46}
    
      47
    
      48check() {
    
      49  cd "$_pkgname-$pkgver"
    
      50  export RUSTUP_TOOLCHAIN=stable
    
      51  export CARGO_TARGET_DIR=target
    
      52  # Keep the build directory out of the binary (panic messages embed source paths).
    
      53  export RUSTFLAGS="${RUSTFLAGS:-} --remap-path-prefix=$srcdir=/"
    
      54  # faro-site (the website generator, not packaged) needs git for its source link.
    
      55  cargo test --frozen --workspace --exclude faro-site
    
      56}
    
      57
    
      58package() {
    
      59  cd "$_pkgname-$pkgver"
    
      60  install -Dm0755 -t "$pkgdir/usr/bin/" "target/release/$_pkgname"
    
      61  install -Dm0644 -t "$pkgdir/usr/share/doc/$pkgname/" README.md
    
      62  install -Dm0644 -t "$pkgdir/usr/share/licenses/$pkgname/" THIRD_PARTY_NOTICES.md
    
      63}
    
      64

Changes since previous scan

--- PKGBUILD @ 2026-10-15 00:28
+++ PKGBUILD @ 2026-10-19 15:25
@@ -2,7 +2,7 @@
 
 pkgname=faro
 _pkgname=faro
-pkgver=0.1.1
+pkgver=0.1.2
 pkgrel=1
 pkgdesc='Terminal client for Signal, built for people who live in tmux'
 arch=('x86_64' 'aarch64')
@@ -17,13 +17,14 @@
   'xdg-utils: open links and attachments'
   'mpv: play voice notes (or ffmpeg, pipewire, alsa-utils)'
   'ffmpeg: read voice notes that are not WAV'
-  'whisper.cpp: transcribe voice notes locally'
+  'python-openai-whisper: transcribe voice notes locally (the default command)'
+  'whisper-cpp: transcribe voice notes locally (whisper-cli)'
   'libsecret: read the remote transcription API key from the keyring'
 )
 # The release profile strips the binary, so a -debug package would be empty.
 options=('!lto' '!debug')
 source=("$_pkgname-$pkgver.tar.gz::https://github.com/harababurel/faro/archive/refs/tags/v$pkgver.tar.gz")
-sha256sums=('294b909287dd4605d0c4ebc05600382becc02c2371d4fc3e4eef502e9a46743d')
+sha256sums=('a0c0eba6c468ce560e55148ddaa1a355ca1148f51946b1b048b84da68eed21ec')
 
 # The GitHub tarball has no .git, so build.rs falls back to the bare
 # version line ("0.1.0"); set FARO_BUILD_COMMIT/FARO_BUILD_DATE in build()

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-19 15:25:12	Low	1
2026-10-15 00:28:05	Clean	2
2026-10-14 09:19:50	Low	1
2026-10-14 00:06:47	Clean	2
2026-10-13 23:18:21	Low	1