lmm-api-go-bin
maintainer lightjunction
· 0 votes
· scanned 2026-08-18 07:39:23.787586
LOW
View on AUR ↗
Why flagged
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Triggered rules
LOW
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
PKGBUILD
1
# Maintainer: LIghtJUNction <support@lmm.best>
2
3
pkgname=lmm-api-go-bin
4
pkgver=0.1.18
5
pkgrel=1
6
pkgdesc='LMM API Go backend, native CLI, systemd service, and web frontend (prebuilt)'
7
arch=('x86_64' 'aarch64')
8
url='https://github.com/LIghtJUNction/api.lmm.best'
9
license=('AGPL-3.0-only')
10
depends=('ca-certificates' 'systemd' 'tzdata')
11
makedepends=('cosign')
12
optdepends=(
13
'postgresql: production database'
14
'valkey: cache, rate limiting, and login sessions'
15
)
16
provides=("lmm-api-go=${pkgver}")
17
conflicts=('lmm-api' 'lmm-api-bin' 'lmm-api-git' 'lmm-api-go' 'lmm-api-go-git')
18
backup=('etc/lmm-api-go/lmm-api-go.env')
19
options=('!strip')
20
21
_release_tag="go-v${pkgver}"
22
_artifact="lmm-api-go-${pkgver}-linux"
23
_release_base="${url}/releases/download/${_release_tag}"
24
source_x86_64=(
25
"${_artifact}-amd64.tar.gz::${_release_base}/${_artifact}-amd64.tar.gz"
26
"${_artifact}-amd64.tar.gz.sha256::${_release_base}/${_artifact}-amd64.tar.gz.sha256"
27
"${_artifact}-amd64.tar.gz.sigstore.json::${_release_base}/${_artifact}-amd64.tar.gz.sigstore.json"
28
)
29
source_aarch64=(
30
"${_artifact}-arm64.tar.gz::${_release_base}/${_artifact}-arm64.tar.gz"
31
"${_artifact}-arm64.tar.gz.sha256::${_release_base}/${_artifact}-arm64.tar.gz.sha256"
32
"${_artifact}-arm64.tar.gz.sigstore.json::${_release_base}/${_artifact}-arm64.tar.gz.sigstore.json"
33
)
34
noextract=("${_artifact}-amd64.tar.gz" "${_artifact}-arm64.tar.gz")
35
sha256sums_x86_64=(
36
'3d7e055d82187e7e762f2f59f105e187182a0d9d96ed02b55951f86830f2ab34'
37
'bfa0943ffe20b82c046b5de96c4bf5a18c1544b2f707908d6d271aa361a3a612'
38
'4e3aa602640e8baab0a286e0baa4c81a3b94dffe6b02c0520757bef651f02e91'
39
)
40
sha256sums_aarch64=(
41
'6ec8efb757168f2c3a29822e18ec1e1014303ab9dcb65e4558a1c4eeb8b76c5c'
42
'd9800dde5d547e914963cbeb60ffc3df18c1f375c3a33d02e05cac9cf99d123d'
43
'1745bfbfe991d31a8c0fc192daa13e052a45bdad0ce09d002f6192ceea48eef7'
44
)
45
46
case "${CARCH}" in
47
x86_64) _release_arch=amd64 ;;
48
aarch64) _release_arch=arm64 ;;
49
*) printf 'unsupported architecture: %s\n' "${CARCH}" >&2; return 1 ;;
50
esac
51
52
prepare() {
53
local archive="${_artifact}-${_release_arch}.tar.gz"
54
local expected actual
55
56
expected=$(awk 'NR == 1 { print $1 }' "${archive}.sha256")
57
[[ ${expected} =~ ^[[:xdigit:]]{64}$ ]] || return 1
58
actual=$(sha256sum "${archive}")
59
[[ ${actual%% *} == "${expected}" ]] || return 1
60
cosign verify-blob \
61
--bundle "${archive}.sigstore.json" \
62
--certificate-identity \
63
"${url}/.github/workflows/release-go.yml@refs/tags/${_release_tag}" \
64
--certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
65
"${archive}"
66
bsdtar -xf "${archive}"
67
}
68
69
package() {
70
local bundle="${srcdir}/${_artifact}-${_release_arch}"
71
local file
72
73
install -Dm0755 "${bundle}/lmm-api-go" "${pkgdir}/usr/bin/lmm-api-go"
74
ln -s lmm-api-go "${pkgdir}/usr/bin/lmm-api"
75
install -Dm0644 "${bundle}/lmm-api.service" \
76
"${pkgdir}/usr/lib/systemd/system/lmm-api.service"
77
install -d -m0700 "${pkgdir}/etc/lmm-api-go"
78
install -m0600 "${bundle}/lmm-api-go.env" \
79
"${pkgdir}/etc/lmm-api-go/lmm-api-go.env"
80
81
install -d -m0755 "${pkgdir}/usr/share/lmm-api-go/frontend-dist"
82
cp -R --no-preserve=ownership,mode,timestamps -- "${bundle}/frontend-dist/." \
83
"${pkgdir}/usr/share/lmm-api-go/frontend-dist/"
84
find "${pkgdir}/usr/share/lmm-api-go/frontend-dist" -type d -exec chmod 0755 {} +
85
find "${pkgdir}/usr/share/lmm-api-go/frontend-dist" -type f -exec chmod 0644 {} +
86
87
for file in LICENSE NOTICE THIRD-PARTY-LICENSES.md; do
88
install -Dm0644 "${bundle}/${file}" "${pkgdir}/usr/share/licenses/${pkgname}/${file}"
89
done
90
install -Dm0644 "${bundle}/REVISION" "${pkgdir}/usr/share/doc/${pkgname}/REVISION"
91
}
92
Changes since previous scan
--- PKGBUILD @ 2026-08-16 00:03+++ PKGBUILD @ 2026-08-18 07:39@@ -1,7 +1,7 @@-# Maintainer: LIghtJUNction <lightjunction.me@gmail.com>+# Maintainer: LIghtJUNction <support@lmm.best> pkgname=lmm-api-go-bin-pkgver=0.1.10+pkgver=0.1.18 pkgrel=1 pkgdesc='LMM API Go backend, native CLI, systemd service, and web frontend (prebuilt)' arch=('x86_64' 'aarch64')@@ -33,14 +33,14 @@ ) noextract=("${_artifact}-amd64.tar.gz" "${_artifact}-arm64.tar.gz") sha256sums_x86_64=(- '492179b16f744932a7ea55c87845d1a206e46b208334c24736d3381bb6a6bc59'- '19b366a7158b59645b66d63e78f718736bab7bba3701759bc81a3e172c2c9d89'- '57abfbefedb14c0930420f4f5c8444bd45767830b21392667f715d894b187a56'+ '3d7e055d82187e7e762f2f59f105e187182a0d9d96ed02b55951f86830f2ab34'+ 'bfa0943ffe20b82c046b5de96c4bf5a18c1544b2f707908d6d271aa361a3a612'+ '4e3aa602640e8baab0a286e0baa4c81a3b94dffe6b02c0520757bef651f02e91' ) sha256sums_aarch64=(- '284a43f850450fc71a01721561252de2d552168591d5a65c7a1b3545d280b3de'- '59114a3fa46751b26cb7b598714d49d711f1d26e25214ac3755f0d47ed12b594'- 'a7a4e347ca65312905f48f095fa25436b215e149a90593a6f645499b2941dbf2'+ '6ec8efb757168f2c3a29822e18ec1e1014303ab9dcb65e4558a1c4eeb8b76c5c'+ 'd9800dde5d547e914963cbeb60ffc3df18c1f375c3a33d02e05cac9cf99d123d'+ '1745bfbfe991d31a8c0fc192daa13e052a45bdad0ce09d002f6192ceea48eef7' ) case "${CARCH}" inScan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-18 07:39:23 | LOW | 1 |
| 2026-08-18 05:38:33 | LOW | 1 |
| 2026-08-16 00:03:42 | CLEAN | 2 |
| 2026-08-15 09:30:19 | LOW | 1 |
| 2026-08-15 00:26:13 | CLEAN | 2 |
| 2026-08-14 05:27:47 | LOW | 1 |
| 2026-08-14 03:27:23 | LOW | 1 |
| 2026-08-14 01:27:12 | LOW | 1 |
| 2026-08-14 00:03:41 | CLEAN | 2 |
| 2026-08-13 21:26:43 | LOW | 1 |
| 2026-08-13 17:26:33 | LOW | 2 |
| 2026-08-13 05:25:33 | LOW | 2 |