lmm-api-web-bin

maintainer lightjunction · 0 votes · scanned 2026-08-18 05:38:33.671963

LOW

Why flagged Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: LIghtJUNction <support@lmm.best>
    
      2
    
      3pkgname=lmm-api-web-bin
    
      4pkgver=0.1.14
    
      5pkgrel=1
    
      6pkgdesc='LMM API production web frontend (prebuilt)'
    
      7arch=('any')
    
      8url='https://github.com/LIghtJUNction/api.lmm.best'
    
      9license=('AGPL-3.0-only')
    
      10depends=('bash' 'coreutils' 'diffutils' 'findutils' 'gawk' 'grep' 'nginx' 'sed' 'systemd' 'util-linux')
    
      11makedepends=('cosign')
    
      12provides=("lmm-api-web=${pkgver}")
    
      13conflicts=('lmm-api-web')
    
      14install=lmm-api-web.install
    
      15
    
      16_release_tag="web-v${pkgver}"
    
      17_artifact="lmm-api-web-${pkgver}.tar.gz"
    
      18_release_base="${url}/releases/download/${_release_tag}"
    
      19source=(
    
      20  "${_artifact}::${_release_base}/${_artifact}"
    
      21  "${_artifact}.sha256::${_release_base}/${_artifact}.sha256"
    
      22  "${_artifact}.sigstore.json::${_release_base}/${_artifact}.sigstore.json"
    
      23  "lmm-api-web-activate::${url}/raw/refs/tags/${_release_tag}/packaging/aur/lmm-api-web-bin/lmm-api-web-activate"
    
      24)
    
      25noextract=("${_artifact}")
    
      26sha256sums=(
    
      27  'e8a11d83517ddd3738e054e506aed4349c2f5ed8c0aace60d368f5dd8480cc02'
    
      28  '96f0771796deefaa322ad11a1f5ea465ae076f40519d97484c28b7297d124501'
    
      29  'bcf35fa1b8cf7ce9a611402f4053c78f5e37f565022d349151c1f2316433da3e'
    
      30  '358f5b958f3520757628d803027dafb1b67ec61b565d00bf4cd4f7927347cf33'
    
      31)
    
      32
    
      33prepare() {
    
      34  local expected actual
    
      35
    
      36  expected=$(awk 'NR == 1 { print $1 }' "${_artifact}.sha256")
    
      37  [[ ${expected} =~ ^[[:xdigit:]]{64}$ ]] || return 1
    
      38  actual=$(sha256sum "${_artifact}")
    
      39  [[ ${actual%% *} == "${expected}" ]] || return 1
    
      40  cosign verify-blob \
    
      41    --bundle "${_artifact}.sigstore.json" \
    
      42    --certificate-identity \
    
      43      "${url}/.github/workflows/release-web.yml@refs/tags/${_release_tag}" \
    
      44    --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
    
      45    "${_artifact}"
    
      46  install -m0755 lmm-api-web-activate lmm-api-web-activate.local
    
      47  bsdtar -xf "${_artifact}"
    
      48  [[ -f ${srcdir}/dist/index.html ]]
    
      49  [[ -x ${srcdir}/lmm-api-web-activate.local ]]
    
      50  [[ -x ${srcdir}/frontend-release.sh ]]
    
      51  ! find "${srcdir}/dist" -type l -print -quit | grep -q .
    
      52}
    
      53
    
      54package() {
    
      55  install -d -m0755 "${pkgdir}/usr/share/lmm-api-web/frontend-dist"
    
      56  cp -R --no-preserve=ownership,mode,timestamps -- "${srcdir}/dist/." \
    
      57    "${pkgdir}/usr/share/lmm-api-web/frontend-dist/"
    
      58  find "${pkgdir}/usr/share/lmm-api-web/frontend-dist" -type d -exec chmod 0755 {} +
    
      59  find "${pkgdir}/usr/share/lmm-api-web/frontend-dist" -type f -exec chmod 0644 {} +
    
      60
    
      61  install -Dm0755 "${srcdir}/lmm-api-web-activate.local" \
    
      62    "${pkgdir}/usr/lib/lmm-api-web/lmm-api-web-activate"
    
      63  install -Dm0755 "${srcdir}/frontend-release.sh" \
    
      64    "${pkgdir}/usr/lib/lmm-api-web/frontend-release.sh"
    
      65
    
      66  local file
    
      67  for file in LICENSE NOTICE THIRD-PARTY-LICENSES.md; do
    
      68    install -Dm0644 "${srcdir}/${file}" "${pkgdir}/usr/share/licenses/${pkgname}/${file}"
    
      69  done
    
      70  install -Dm0644 "${srcdir}/REVISION" "${pkgdir}/usr/share/doc/${pkgname}/REVISION"
    
      71}
    
      72

Changes since previous scan

--- PKGBUILD @ 2026-08-16 00:03
+++ PKGBUILD @ 2026-08-18 05:38
@@ -1,8 +1,8 @@
-# Maintainer: LIghtJUNction <lightjunction.me@gmail.com>
+# Maintainer: LIghtJUNction <support@lmm.best>
 
 pkgname=lmm-api-web-bin
-pkgver=0.1.9
-pkgrel=2
+pkgver=0.1.14
+pkgrel=1
 pkgdesc='LMM API production web frontend (prebuilt)'
 arch=('any')
 url='https://github.com/LIghtJUNction/api.lmm.best'
@@ -24,9 +24,9 @@
 )
 noextract=("${_artifact}")
 sha256sums=(
-  '5c3f1a2c5fdca43ff2cc10f4d8b2e458b6e3f22904b3de2f4918e8c7cc769a00'
-  'a1b9f60b588ed727bb9c30201e1197eb02f7191feef1c3aa1080da89dfc756a5'
-  '090021987884cdd061d38641f340f34ee3b1b4b97fe781835a690be89e89933b'
+  'e8a11d83517ddd3738e054e506aed4349c2f5ed8c0aace60d368f5dd8480cc02'
+  '96f0771796deefaa322ad11a1f5ea465ae076f40519d97484c28b7297d124501'
+  'bcf35fa1b8cf7ce9a611402f4053c78f5e37f565022d349151c1f2316433da3e'
   '358f5b958f3520757628d803027dafb1b67ec61b565d00bf4cd4f7927347cf33'
 )
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 05:38:33	LOW	1
2026-08-16 00:03:42	CLEAN	2
2026-08-15 09:30:19	LOW	1
2026-08-15 00:26:13	CLEAN	2
2026-08-14 05:27:47	LOW	1
2026-08-14 01:27:12	LOW	1
2026-08-14 00:03:41	LOW	2
2026-08-13 21:26:43	LOW	2
2026-08-13 15:26:23	LOW	2