invidious-companion-git

LOW

maintainer CountMurphy 0 votes scanned 2026-10-31 01:57:41.978121

View on AUR

Why flagged

The package builds from the project's own Git repository, uses Deno to compile the companion app, and installs configuration and service files; the only concerns are SKIP'd checksums and low votes, but no remote code execution or malicious behavior is present.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from the project's own Git repository, uses Deno to compile the companion app, and installs configuration and service files; the only concerns are SKIP'd checksums and low votes, but no remote code execution or malicious behavior is present.

PKGBUILD

      1# Maintainer: CountMurphy <spartan.1086@gmail.com>
    
      2
    
      3pkgname='invidious-companion-git'
    
      4_github_path="github.com/iv-org/invidious-companion"
    
      5_go_pkg_path="src/${_github_path}"
    
      6pkgver=release.master.127.gfcb0456
    
      7pkgrel=1
    
      8options=(!strip !debug)
    
      9arch=('x86_64')
    
      10pkgdesc='Companion app for invidious'
    
      11backup=('etc/invidious-companion.conf')
    
      12url='https://github.com/iv-org/invidious-companion'
    
      13license=('GPL')
    
      14depends=('deno')
    
      15makedepends=('git')
    
      16
    
      17source=(
    
      18    "git+https://github.com/iv-org/invidious-companion"
    
      19    "invidious-companion.config"
    
      20    "invidious-companion.install"
    
      21)
    
      22
    
      23sha512sums=(
    
      24    'SKIP'
    
      25    '9c2ff2046f3563933e8b6fb54d14e17c046454ca7a21f2134924352e4191e93a81e597ebab18964d8a8a748ba7bf5714a9c37cbf46eeb433cfb95b6a27e9099d'
    
      26    '1dbfea4befbcfe63ad952c6634e12ca48d353ce31ca842c506835b1789a017ca75a883828cc193c5eb5d873df529daacd0c3b1d8e9297a78283f4eb3601be553'
    
      27)
    
      28
    
      29pkgver() {
    
      30    cd invidious-companion
    
      31    git describe --tags | sed 's/^v//;s/-/./g'
    
      32}
    
      33
    
      34
    
      35build() {
    
      36    cd invidious-companion
    
      37    sed -i 's|/home/invidious/invidious-companion|/usr/lib/invidious/|g' invidious-companion.service
    
      38    sed -i 's|BindPaths=/home/invidious/tmp|#BindPaths=/home/invidious/tmp|g' invidious-companion.service
    
      39    sed -i 's|Environment=SERVER_SECRET_KEY=CHANGE_ME|EnvironmentFile=/etc/invidious-companion.conf|g' invidious-companion.service
    
      40    deno task compile
    
      41}
    
      42
    
      43package() {
    
      44    cd $srcdir/invidious-companion
    
      45    install -Dm644 "invidious-companion.service" "${pkgdir}/usr/lib/systemd/system/invidious-companion.service"
    
      46
    
      47    mkdir -p "${pkgdir}/usr/lib/invidious"
    
      48    cp "invidious_companion" "${pkgdir}/usr/lib/invidious/"
    
      49    install -Dm 644 "$srcdir/invidious-companion.config" "$pkgdir/etc/invidious-companion.conf"
    
      50    install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      51    install=invidious-companion.install
    
      52}
    
      53

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-31 01:57:41	Low	2