mediaboom-3-git

LOW
maintainer Aptivi 0 votes scanned 2026-11-05 10:09:05.899562
View on AUR
Why flagged

The package builds from a public Git repository with a SKIP'd checksum, but sources are from the project's own GitHub and involve no remote code execution or untrusted prebuilt binaries.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a public Git repository with a SKIP'd checksum, but sources are from the project's own GitHub and involve no remote code execution or untrusted prebuilt binaries.

PKGBUILD

1# Maintainer: Aptivi <ceo at aptivi dot anonaddy dot com>
2pkgname=mediaboom-3-git
3pkgver=v0.1.0.r741.e2aecf6d2
4pkgrel=1
5pkgdesc="Cross-platform music and video player written in C#"
6arch=('x86_64' 'aarch64')
7url="https://aptivi.github.io"
8license=('GPL-3.0-or-later')
9depends=('dotnet-runtime-10.0' 'tzdata' 'mpv')
10makedepends=('git' 'dotnet-sdk-10.0' 'make' 'which' 'python-py7zr')
11optdepends=('portaudio: PortAudio support for MediaBoom'
12 'libpulse: PulseAudio support for MediaBoom')
13provides=("${pkgname%-git}")
14conflicts=("${pkgname%-git}")
15options=('!strip')
16source=("${pkgname}::git+https://github.com/Aptivi/MediaBoom#branch=main")
17sha256sums=('SKIP')
18
19pkgver() {
20 cd "${pkgname}"
21 printf "%s" "$(git describe --long | sed 's/\([^-]*-\)g/r\1/;s/-/./g')"
22}
23
24prepare() {
25 cd "${pkgname}"
26 make init-offline
27 make clean
28 git submodule update --init --remote
29}
30
31build() {
32 cd "${pkgname}"
33 make all-offline
34}
35
36package() {
37 cd "${pkgname}"
38 make install DESTDIR="$pkgdir"
39}
40

Scan history

Scanned at (UTC)SeverityRules
2026-11-05 10:09:05 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion