fastpotify

LOW

maintainer crmne 0 votes scanned 2026-08-27 13:32:42.941682

View on AUR

Why flagged

The package downloads prebuilt binaries from GitHub releases, which is a common but unverified practice; however, the source is from the project's official repository, and the binaries are standard for the target architecture, posing low risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads prebuilt binaries from GitHub releases, which is a common but unverified practice; however, the source is from the project's official repository, and the binaries are standard for the target architecture, posing low risk.

PKGBUILD

      1# Maintainer: Carmine Paolino <carmine@paolino.me>
    
      2pkgname=fastpotify
    
      3pkgver=0.1.1
    
      4pkgrel=1
    
      5pkgdesc="Fast native Spotify client with local playback and Spotify Connect"
    
      6arch=('x86_64' 'aarch64')
    
      7url="https://github.com/crmne/fastpotify"
    
      8license=('MIT')
    
      9install="${pkgname}.install"
    
      10# alsa-lib and libpulse are linked directly; the rest are dlopened by winit
    
      11# and glutin at startup, and this is a GUI-only application, so all of them
    
      12# have to be there for it to run at all.
    
      13depends=('alsa-lib' 'libpulse' 'libglvnd' 'libxkbcommon' 'wayland' 'libx11')
    
      14optdepends=('libxkbcommon-x11: keyboard handling in X11 sessions'
    
      15            'pipewire-pulse: PipeWire as the PulseAudio server')
    
      16conflicts=('fastpotify-git')
    
      17options=('!debug' '!strip')
    
      18_repo="https://github.com/crmne/fastpotify"
    
      19source_x86_64=("${_repo}/releases/download/v${pkgver}/fastpotify-v${pkgver}-x86_64-unknown-linux-gnu.tar.gz")
    
      20source_aarch64=("${_repo}/releases/download/v${pkgver}/fastpotify-v${pkgver}-aarch64-unknown-linux-gnu.tar.gz")
    
      21sha256sums_x86_64=('f9a42b7dd4aa1e44113f7aa37c350c7a871977b2c8e9eace04cb8025aad717eb')
    
      22sha256sums_aarch64=('4af68ee405da455706bee62b88e1098f1ad73b160a65adbf84bbdcebeaa69dd1')
    
      23
    
      24package() {
    
      25  local target
    
      26  case "$CARCH" in
    
      27    x86_64) target="x86_64-unknown-linux-gnu" ;;
    
      28    aarch64) target="aarch64-unknown-linux-gnu" ;;
    
      29  esac
    
      30  local dir="${srcdir}/fastpotify-v${pkgver}-${target}"
    
      31
    
      32  install -Dm755 "${dir}/fastpotify" "${pkgdir}/usr/bin/fastpotify"
    
      33  install -Dm644 "${dir}/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      34  install -Dm644 "${dir}/README.md" "${pkgdir}/usr/share/doc/${pkgname}/README.md"
    
      35  install -Dm644 "${dir}/packaging/applications/fastpotify.desktop" \
    
      36    "${pkgdir}/usr/share/applications/fastpotify.desktop"
    
      37  install -Dm644 "${dir}/packaging/icons/fastpotify.svg" \
    
      38    "${pkgdir}/usr/share/icons/hicolor/scalable/apps/fastpotify.svg"
    
      39}
    
      40

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-27 13:32:42	Low	2