lmms-prerelease-bin

LOW

maintainer friedev 1 votes scanned 2026-10-17 19:19:13.554222

View on AUR

Why flagged

The package installs a pre-release AppImage from the official GitHub repository of the project, which is a normal distribution method; the AppImage is extracted and repackaged, but all operations are transparent and confined to the project's own release assets, posing no inherent risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a pre-release AppImage from the official GitHub repository of the project, which is a normal distribution method; the AppImage is extracted and repackaged, but all operations are transparent and confined to the project's own release assets, posing no inherent risk.

PKGBUILD

      1# Maintainer: Aaron Friesen <aaron@frie.dev>
    
      2# shellcheck shell=bash disable=SC2034,SC2154,SC2164
    
      3
    
      4pkgname=lmms-prerelease-bin
    
      5pkgver=1.3.0.alpha.2
    
      6_name=lmms
    
      7_tag=1.3.0-alpha.2
    
      8pkgrel=1
    
      9pkgdesc='The Linux MultiMedia Studio (pre-release)'
    
      10arch=(x86_64)
    
      11url='https://lmms.io'
    
      12license=(GPL-2.0-or-later)
    
      13provides=(lmms)
    
      14conflicts=(lmms)
    
      15depends=(
    
      16	libgcc
    
      17	libstdc++
    
      18	glibc
    
      19	hicolor-icon-theme
    
      20	libx11
    
      21	libxcb
    
      22	alsa-lib
    
      23	fftw
    
      24	fltk
    
      25	fluidsynth
    
      26	lame
    
      27	libjack.so=0-64
    
      28	libogg
    
      29	libpulse
    
      30	libsamplerate
    
      31	libsndfile
    
      32	libvorbis
    
      33	lilv
    
      34	portaudio
    
      35	qt5-base
    
      36	qt5-svg
    
      37	qt5-x11extras
    
      38	sdl2
    
      39	sndio
    
      40	util-linux-libs
    
      41	zlib
    
      42)
    
      43makedepends=(patchelf)
    
      44optdepends=(
    
      45	'carla: Carla plugin support'
    
      46	'wine: Windows VST plugin support'
    
      47	'lib32-gcc-libs: VST plugin support'
    
      48	'lib32-glibc: VST plugin support'
    
      49	'pulseaudio: pulseaudio support'
    
      50	'qt5-wayland: Wayland support'
    
      51)
    
      52options=(!lto !debug)
    
      53source=(
    
      54	"https://github.com/LMMS/lmms/releases/download/v${_tag}/lmms-${_tag}-linux-${CARCH}.AppImage"
    
      55	"https://raw.githubusercontent.com/LMMS/lmms/v${_tag}/LICENSE.txt"
    
      56)
    
      57b2sums=('03271113a252b0e7b8c948117375fcbc22c823089e2eeb17b1dfdbca66d569b3d7c2ecf124a50ee8422f350e0b36aaadd8724f0ecfc70f77170d4c069f962e7f'
    
      58	'e75b5b9174d5e2500fafeafe131877fb6251037f1f5ce2a2a26a83b3540ff8b67605c08cbd332f61b759f09cab2e02c27a5c3e0659bdabf57fd9c5cc107eb9e5')
    
      59
    
      60build() {
    
      61	local appimage="lmms-${_tag}-linux-${CARCH}.AppImage"
    
      62
    
      63	rm -rf squashfs-root
    
      64	chmod +x "$appimage"
    
      65	"./$appimage" --appimage-extract >/dev/null
    
      66
    
      67	# Keep only the bundled libraries without a compatible Arch package:
    
      68	# - libcarlabase/libvstbase/librtaudio/librtmidi are LMMS internals,
    
      69	# - libgig.so.10 / libstk-4.6.1 / libsoundio.so.2 have no matching system
    
      70	#   soname (the system ships libgig.so.14, stk 5 and no libsoundio).
    
      71	# - Everything else (Qt, SDL2, audio codecs, GTK, ICU, etc.) comes from the
    
      72	#   system and has the same soname as the bundled copy.
    
      73	local f
    
      74	for f in squashfs-root/usr/lib/*; do
    
      75		case "${f##*/}" in
    
      76		lmms | \
    
      77			libcarlabase.so | \
    
      78			libgig.so.10 | \
    
      79			librtaudio.so.6 | \
    
      80			librtmidi.so.6 | \
    
      81			libsoundio.so.2 | \
    
      82			libstk-4.6.1.so | \
    
      83			libvstbase.so)
    
      84			;;
    
      85		*)
    
      86			rm -rf "$f"
    
      87			;;
    
      88		esac
    
      89	done
    
      90	rm -rf squashfs-root/usr/plugins squashfs-root/usr/bin/qt.conf
    
      91	rmdir squashfs-root/usr/share/pixmaps
    
      92
    
      93	# Carla's native plugin library is installed to /usr/lib/carla. libcarlabase.so
    
      94	# exists twice: lmms loads the copy in lib/lmms as a plugin, so patch both.
    
      95	patchelf --add-rpath /usr/lib/carla \
    
      96		squashfs-root/usr/lib/libcarlabase.so \
    
      97		squashfs-root/usr/lib/lmms/libcarlabase.so
    
      98}
    
      99
    
      100package() {
    
      101	local prefix="/usr/lib/$pkgname"
    
      102
    
      103	install -d "$pkgdir$prefix" "$pkgdir/usr/bin" "$pkgdir/usr/share"
    
      104	cp -a --no-preserve=ownership squashfs-root/usr/. "$pkgdir$prefix/"
    
      105	mv "$pkgdir$prefix"/share/{applications,icons,man,mime} "$pkgdir/usr/share/"
    
      106	ln -s "$prefix/bin/lmms" "$pkgdir/usr/bin/lmms"
    
      107
    
      108	install -Dm644 LICENSE.txt "$pkgdir/usr/share/licenses/$pkgname/LICENSE.txt"
    
      109}
    
      110

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 19:19:13	Low	2