jellypilot-bin
The package installs a prebuilt binary from the project's official GitHub releases, which is a normal practice for AUR binary packages; the source is verifiable via a provided checksum, and the binary is from a trusted project host.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's official GitHub releases, which is a normal practice for AUR binary packages; the source is verifiable via a provided checksum, and the binary is from a trusted project host.
PKGBUILD
# Maintainer: Hewel <13846369+hewel@users.noreply.github.com>
pkgname=jellypilot-bin
pkgver=2.1.1
pkgrel=1
pkgdesc='Jellyfin and Emby companion app: cast receiver and library browser driving external MPV (prebuilt binary)'
arch=('x86_64')
url='https://github.com/hewel/jellypilot'
license=('MIT')
depends=(
'gtk3'
'mpv'
'libxkbcommon'
'wayland'
)
provides=('jellypilot')
conflicts=('jellypilot')
options=('!strip' '!debug')
_pkgrel=1
source=(
"$pkgname-$pkgver.pkg.tar.zst::$url/releases/download/v$pkgver/jellypilot-$pkgver-$_pkgrel-x86_64.pkg.tar.zst"
)
noextract=("$pkgname-$pkgver.pkg.tar.zst")
# Filled from the GitHub release SHA256SUMS when publishing to the AUR.
sha256sums=('07ab40c42d9341e96c0f0d7b26b16ae519d851bfa39c4736242ab2e6d9f969e2')
package() {
bsdtar -x \
--exclude='.BUILDINFO' \
--exclude='.MTREE' \
--exclude='.PKGINFO' \
-C "$pkgdir" \
-f "$srcdir/$pkgname-$pkgver.pkg.tar.zst"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-09 17:19:54 | Low | 2 |