lyrics-tool-git

maintainer Hamza_Abdelmoume · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds from the project's own git repository, which is normal for -git AUR packages; the low severity is due to few votes and recent upload, not malicious content.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from the project's own git repository, which is normal for -git AUR packages; the low severity is due to few votes and recent upload, not malicious content.

PKGBUILD

      1# Maintainer: Hamza Abdelmoumene <ph_abdelmoumene@esi.dz>
    
      2#
    
      3# AUR -git package for lyrics-tool. Builds the tip of the main branch.
    
      4pkgname=lyrics-tool-git
    
      5_pkgname=lyrics-tool
    
      6pkgver=0.2.2
    
      7pkgrel=1
    
      8pkgdesc="Cross-platform terminal lyrics visualizer and LRC/WLRC toolkit (git)"
    
      9arch=('any')
    
      10url="https://github.com/hamza-abdelmoumene/lyrics-tool"
    
      11license=('MIT')
    
      12depends=(
    
      13  'python'
    
      14  'python-mutagen'
    
      15  'python-yaml'
    
      16  'python-pillow'
    
      17  'python-syncedlyrics'   # from the AUR if not in the official repos
    
      18)
    
      19optdepends=(
    
      20  'playerctl: live player sync for the visualizer (lyricsooo)'
    
      21  'ffmpeg: read audio durations when processing (lyricsooo-cook)'
    
      22)
    
      23makedepends=('git' 'python-build' 'python-installer' 'python-wheel' 'python-setuptools')
    
      24provides=('lyrics-tool')
    
      25conflicts=('lyrics-tool')
    
      26source=("git+$url.git")
    
      27sha256sums=('SKIP')
    
      28
    
      29pkgver() {
    
      30  cd "$_pkgname"
    
      31  git describe --long --tags 2>/dev/null | sed 's/^v//;s/\([^-]*-g\)/r\1/;s/-/./g' \
    
      32    || printf "0.2.0.r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
    
      33}
    
      34
    
      35build() {
    
      36  cd "$_pkgname"
    
      37  python -m build --wheel --no-isolation
    
      38}
    
      39
    
      40package() {
    
      41  cd "$_pkgname"
    
      42  python -m installer --destdir="$pkgdir" dist/*.whl
    
      43  install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      44  install -Dm644 README.md "$pkgdir/usr/share/doc/$pkgname/README.md"
    
      45}
    
      46

Changes since previous scan

--- PKGBUILD @ 2026-07-23 00:14
+++ PKGBUILD @ 2026-08-03 00:08
@@ -3,7 +3,7 @@
 # AUR -git package for lyrics-tool. Builds the tip of the main branch.
 pkgname=lyrics-tool-git
 _pkgname=lyrics-tool
-pkgver=0.2.0
+pkgver=0.2.2
 pkgrel=1
 pkgdesc="Cross-platform terminal lyrics visualizer and LRC/WLRC toolkit (git)"
 arch=('any')

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 19:25:44	LOW	2
2026-07-23 00:14:47	CLEAN	2
2026-07-22 15:20:42	LOW	1