kopuz-nightly-bin

LOW

maintainer UMCEKO 0 votes scanned 2026-10-28 07:49:59.681246

View on AUR

Why flagged

The package installs a prebuilt binary from the project's official GitHub releases, which is normal for -bin packages; the low severity is due to the recent upload and few votes, not the source itself.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's official GitHub releases, which is normal for -bin packages; the low severity is due to the recent upload and few votes, not the source itself.

PKGBUILD

      1# Maintainer: temidaradev <temidaradev@proton.me>
    
      2pkgname=kopuz-nightly-bin
    
      3# pkgver cannot hold the tag's "-", so the release's own version rides in _version.
    
      4_version=0.68.0-nightly.20261028
    
      5pkgver=0.68.0_nightly.20261028
    
      6pkgrel=1
    
      7pkgdesc="A modern music player, built nightly from the latest development code (pre-built binary)"
    
      8arch=('x86_64')
    
      9url="https://github.com/Kopuz-org/kopuz"
    
      10license=('EUPL-1.2')
    
      11provides=('kopuz-nightly' 'kopuzd-nightly' 'kopuzctl-nightly')
    
      12conflicts=('kopuz-nightly')
    
      13depends=(
    
      14    'ca-certificates'
    
      15    'alsa-lib'
    
      16    'openssl'
    
      17    'gcc-libs'
    
      18    'libxcb'
    
      19    'libxkbcommon'
    
      20    'libxkbcommon-x11'
    
      21    'wayland'
    
      22    'vulkan-icd-loader'
    
      23    'fontconfig'
    
      24    'freetype2'
    
      25)
    
      26optdepends=(
    
      27    'ffmpeg: converting YouTube downloads to MP3, FLAC or WAV'
    
      28)
    
      29source=("kopuz-nightly-$pkgver-$pkgrel.deb::https://github.com/Kopuz-org/kopuz/releases/download/v$_version/kopuz-nightly_${_version}_amd64.deb")
    
      30# Filled in at publish time from the release's kopuz-nightly_<version>_amd64.deb.sha256.
    
      31sha256sums=('207d41707c0211db4f30732f5b05fdea9066289ba0ddf90ebc174c34d21d002f')
    
      32
    
      33package() {
    
      34    bsdtar -xf data.tar.gz -C "$pkgdir"
    
      35}
    
      36

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-28 07:49:59	Low	2