flaccy-server-bin

LOW
maintainer guitaripod 0 votes scanned 2026-10-25 17:43:03.910647
View on AUR
Why flagged

The package downloads a prebuilt binary from a personal GitHub release, which is unverifiable but not inherently malicious; it installs only a single executable and documentation, with no obfuscated code or remote execution beyond the binary itself.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from a personal GitHub release, which is unverifiable but not inherently malicious; it installs only a single executable and documentation, with no obfuscated code or remote execution beyond the binary itself.

PKGBUILD

1# Maintainer: Marcus Ziade <guitaripod@gmail.com>
2pkgname=flaccy-server-bin
3pkgver=0.1.0
4pkgrel=1
5pkgdesc="Headless OpenSubsonic server for one music folder, made for Flaccy and any Subsonic app"
6arch=('x86_64')
7url="https://github.com/guitaripod/flaccy"
8license=('GPL-3.0-only')
9depends=('glibc')
10optdepends=('ffmpeg: transcoding for apps that ask for AAC, Opus or MP3'
11 'tailscale: HTTPS access from your devices with tailscale serve')
12provides=('flaccy-server')
13conflicts=('flaccy-server')
14options=('!strip' '!debug')
15source=("https://github.com/guitaripod/flaccy/releases/download/server-v${pkgver}/flaccy-server-linux-x86_64.tar.gz")
16sha256sums=('11ac60b614bf7ce57375d9e37a3a85b50c97116333f99b6c7f2f45f17c6c4e41')
17
18package() {
19 cd "$srcdir/flaccy-server-linux-x86_64"
20 install -Dm755 flaccy-server "$pkgdir/usr/bin/flaccy-server"
21 sed 's|%h/.cargo/bin/flaccy-server|/usr/bin/flaccy-server|' flaccy-server.service \
22 | install -Dm644 /dev/stdin "$pkgdir/usr/lib/systemd/user/flaccy-server.service"
23 install -Dm644 README.md "$pkgdir/usr/share/doc/flaccy-server/README.md"
24 install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
25}
26

Scan history

Scanned at (UTC)SeverityRules
2026-10-25 17:43:03 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion