lyrune-bin

maintainer amtoaer · 0 votes · scanned 2026-08-18 11:39:43.480180

LOW

Why flagged The package installs a prebuilt binary from GitHub releases, which is a normal distribution method for Rust applications; the source is the project's own official release infrastructure, and the binary is not executed in a dangerous way.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from GitHub releases, which is a normal distribution method for Rust applications; the source is the project's own official release infrastructure, and the binary is not executed in a dangerous way.

PKGBUILD

      1# Maintainer: amtoaer <amtoaer@gmail.com>
    
      2
    
      3_pkgname=lyrune
    
      4pkgname=lyrune-bin
    
      5pkgver=1.0.0
    
      6pkgrel=1
    
      7pkgdesc='Fast native QQ Music desktop client built with Rust and GPUI (prebuilt binary)'
    
      8arch=('x86_64' 'aarch64')
    
      9url='https://github.com/amtoaer/lyrune'
    
      10license=('LicenseRef-Unknown')
    
      11options=('!debug' '!strip')
    
      12depends=(
    
      13  'alsa-lib'
    
      14  'fontconfig'
    
      15  'gcc-libs'
    
      16  'glibc'
    
      17  'libxcb'
    
      18  'libxkbcommon'
    
      19  'libxkbcommon-x11'
    
      20  'vulkan-driver'
    
      21  'vulkan-icd-loader'
    
      22  'wayland'
    
      23)
    
      24optdepends=('org.freedesktop.secrets: persist QQ Music credentials')
    
      25provides=("${_pkgname}=${pkgver}")
    
      26conflicts=("${_pkgname}")
    
      27source=(
    
      28  "${_pkgname}.desktop::${url}/raw/v${pkgver}/packaging/arch/${_pkgname}.desktop"
    
      29  "${_pkgname}.svg::${url}/raw/v${pkgver}/crates/lyrune-app/assets/${_pkgname}.svg"
    
      30)
    
      31source_x86_64=(
    
      32  "${_pkgname}-v${pkgver}-linux-amd64.tar.gz::${url}/releases/download/v${pkgver}/${_pkgname}-v${pkgver}-linux-amd64.tar.gz"
    
      33)
    
      34source_aarch64=(
    
      35  "${_pkgname}-v${pkgver}-linux-arm64.tar.gz::${url}/releases/download/v${pkgver}/${_pkgname}-v${pkgver}-linux-arm64.tar.gz"
    
      36)
    
      37sha256sums=(
    
      38  '91ef70cfb609f0b32808f0cd40004f6800f43a176cb26a5819628d16c4af9f44'
    
      39  '68913e1ef3f2c4be855b046d7ec69d21371653cff22d40803a90c42cbf231abe'
    
      40)
    
      41sha256sums_x86_64=(
    
      42  '2874d550c362b932060f0003a9fe87aede41838108a53f171577a5002deb00d6'
    
      43)
    
      44sha256sums_aarch64=(
    
      45  'a7d43b28f11e3588127a3970dd5458cce0e0223674cb230706421a28b7b1e101'
    
      46)
    
      47
    
      48package() {
    
      49  local asset_arch
    
      50  case "${CARCH}" in
    
      51    x86_64) asset_arch=amd64 ;;
    
      52    aarch64) asset_arch=arm64 ;;
    
      53  esac
    
      54
    
      55  local archive_root="${srcdir}/${_pkgname}-v${pkgver}-linux-${asset_arch}"
    
      56  install -Dm755 "${archive_root}/${_pkgname}" \
    
      57    "${pkgdir}/usr/bin/${_pkgname}"
    
      58  install -Dm644 "${srcdir}/${_pkgname}.desktop" \
    
      59    "${pkgdir}/usr/share/applications/${_pkgname}.desktop"
    
      60  install -Dm644 "${srcdir}/${_pkgname}.svg" \
    
      61    "${pkgdir}/usr/share/icons/hicolor/scalable/apps/${_pkgname}.svg"
    
      62  install -Dm644 "${archive_root}/README.md" \
    
      63    "${pkgdir}/usr/share/doc/${_pkgname}/README.md"
    
      64  install -Dm644 "${archive_root}/THIRD_PARTY_NOTICES.md" \
    
      65    "${pkgdir}/usr/share/doc/${_pkgname}/THIRD_PARTY_NOTICES.md"
    
      66  install -Dm644 "${archive_root}/license-unknown.txt" \
    
      67    "${pkgdir}/usr/share/licenses/${pkgname}/license-unknown.txt"
    
      68}
    
      69

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 11:39:43	LOW	2