kitty-tune-bin
LOW
maintainer Felitendo
0 votes
scanned 2026-09-07 07:13:50.910258
Why flagged
The package installs prebuilt binaries from the project's official GitHub releases, which is a normal AUR practice for binary packages; the low severity is due to the binary nature and recent upload with few votes, but the source is trustworthy and checksums are provided.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs prebuilt binaries from the project's official GitHub releases, which is a normal AUR practice for binary packages; the low severity is due to the binary nature and recent upload with few votes, but the source is trustworthy and checksums are provided.
PKGBUILD
1
# Maintainer: Felitendo
2
# This PKGBUILD is updated automatically:
3
# https://github.com/Felitendo/PKGBUILDS
4
5
pkgname=kitty-tune-bin
6
pkgver=1.3.3
7
pkgrel=1
8
pkgdesc="SoundCloud and YouTube music player (upstream binary)"
9
arch=('x86_64' 'aarch64')
10
url="https://github.com/alan7383/KittyTuneDesktop"
11
license=('MIT')
12
# jpackage bundles Java and FFmpeg. These are the system libraries declared
13
# by both upstream .debs, plus GTK for the bundled JRE's desktop integration.
14
depends=('alsa-lib' 'brotli' 'bzip2' 'expat' 'fontconfig' 'freetype2'
15
'gcc-libs' 'glibc' 'gtk3' 'hicolor-icon-theme' 'libbsd' 'libglvnd'
16
'libmd' 'libpng' 'libx11' 'libxau' 'libxcb' 'libxdmcp' 'libxext'
17
'libxi' 'libxrender' 'libxtst' 'xdg-utils' 'zlib')
18
provides=("kitty-tune=${pkgver}")
19
conflicts=('kitty-tune')
20
options=('!strip' '!debug')
21
# Upstream declares MIT in the README but ships no standalone license text.
22
source=("${pkgname}-${pkgver}-README.md::https://raw.githubusercontent.com/alan7383/KittyTuneDesktop/v${pkgver}/README.md")
23
source_x86_64=("${pkgname}-${pkgver}-x86_64.deb::https://github.com/alan7383/KittyTuneDesktop/releases/download/v${pkgver}/kitty-tune_${pkgver}_amd64.deb")
24
source_aarch64=("${pkgname}-${pkgver}-aarch64.deb::https://github.com/alan7383/KittyTuneDesktop/releases/download/v${pkgver}/kitty-tune_${pkgver}_arm64.deb")
25
noextract=("${pkgname}-${pkgver}-x86_64.deb" "${pkgname}-${pkgver}-aarch64.deb")
26
sha256sums=('5681c64cc1c1b1ce285f70b4f9b9f0a72db34162e87e73d3966fec2a9adb5817')
27
sha256sums_x86_64=('0440f01aa89371770da625ba4ce159422e903c0dc3867d7d45e8ed2b984ccbe3')
28
sha256sums_aarch64=('a08244b65fb2a7e3944f8456e24fed09515f7cc9fddd74691896d67f2d6f91bd')
29
30
package() {
31
bsdtar -xOf "$srcdir/${pkgname}-${pkgver}-${CARCH}.deb" 'data.tar.*' \
32
| bsdtar -xpf - -C "$pkgdir" ./opt
33
34
install -d "$pkgdir/usr/bin"
35
ln -s /opt/kitty-tune/bin/KittyTune "$pkgdir/usr/bin/kitty-tune"
36
37
# The .deb registers this through postinst, which pacman never executes.
38
install -Dm644 "$pkgdir/opt/kitty-tune/lib/kitty-tune-KittyTune.desktop" \
39
"$pkgdir/usr/share/applications/kitty-tune.desktop"
40
sed -i \
41
-e 's|^Exec=.*|Exec=kitty-tune|' \
42
-e 's|^Icon=.*|Icon=kittytune|' \
43
-e 's|^Categories=.*|Categories=AudioVideo;Audio;Player;|' \
44
-e '/^MimeType=$/d' \
45
"$pkgdir/usr/share/applications/kitty-tune.desktop"
46
install -Dm644 "$pkgdir/opt/kitty-tune/lib/KittyTune.png" \
47
"$pkgdir/usr/share/icons/hicolor/512x512/apps/kittytune.png"
48
49
install -Dm644 "$srcdir/${pkgname}-${pkgver}-README.md" \
50
"$pkgdir/usr/share/licenses/$pkgname/README.md"
51
install -Dm644 "$pkgdir/opt/kitty-tune/share/doc/copyright" \
52
"$pkgdir/usr/share/licenses/$pkgname/copyright"
53
54
# The in-app updater installs upstream's differently named kitty-tune
55
# package. The conflict above prevents an unattended replacement; use an
56
# AUR helper to update kitty-tune-bin instead.
57
}
58
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-07 07:13:50 | Low | 2 |