meetily-cuda
LOW
maintainer Snoopey
0 votes
scanned 2026-10-30 17:58:32.625252
Why flagged
The only non-standard host is cdn.pyke.io serving an ONNX Runtime prebuilt library (ort-rs crate's official distribution CDN for onnxruntime-rs), which has a pinned sha256 checksum; all other sources are from GitHub (official project repo and adobe-fonts), and the package builds from source rather than running unreviewed remote code.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 75%): The only non-standard host is cdn.pyke.io serving an ONNX Runtime prebuilt library (ort-rs crate's official distribution CDN for onnxruntime-rs), which has a pinned sha256 checksum; all other sources are from GitHub (official project repo and adobe-fonts), and the package builds from source rather than running unreviewed remote code.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:20
'onnxruntime-1.22.0-x86_64.tgz::https://cdn.pyke.io/0/pyke:ort-rs/ms@1.22.0/x86_64-unknown-linux-gnu.tgz')
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Snoopey
2
pkgname=meetily-cuda
3
pkgver=0.4.1
4
pkgrel=3
5
pkgdesc='Local meeting transcription and summaries (NVIDIA CUDA build)'
6
arch=('x86_64')
7
url='https://github.com/Zackriya-Solutions/meetily'
8
license=('MIT' 'OFL-1.1')
9
depends=('glibc' 'libgcc' 'libstdc++' 'libgomp' 'dbus' 'cairo' 'hicolor-icon-theme'
10
'glib2' 'gdk-pixbuf2' 'xz' 'libsoup3' 'xdg-utils' 'alsa-lib' 'ffmpeg' 'gtk3' 'libappindicator-gtk3' 'openssl' 'webkit2gtk-4.1' 'cuda' 'nvidia-utils')
11
makedepends=('clang' 'cmake' 'git' 'nodejs>=20' 'pnpm' 'rust' 'python')
12
provides=("meetily=$pkgver")
13
conflicts=('meetily')
14
optdepends=('ollama: local Ollama model provider')
15
options=('!lto' '!debug')
16
source=("meetily-$pkgver.tar.gz::$url/archive/refs/tags/v$pkgver.tar.gz"
17
'arch.patch' 'meetily.desktop'
18
'SourceSans3VF-Upright.ttf::https://raw.githubusercontent.com/adobe-fonts/source-sans/3.052R/VF/SourceSans3VF-Upright.ttf'
19
'source-sans-LICENSE.md::https://raw.githubusercontent.com/adobe-fonts/source-sans/3.052R/LICENSE.md'
20
'onnxruntime-1.22.0-x86_64.tgz::https://cdn.pyke.io/0/pyke:ort-rs/ms@1.22.0/x86_64-unknown-linux-gnu.tgz')
21
sha256sums=('66f06a1c4b60334d1c6d62c5f97bc5e847df33e98240ef125be01bacb7274b88'
22
'47f7a3f53dcb7b6380871c319d9db7de74642108f082469affe5fbbf0c887f63' '5e7e443ebafc9c2cdedede09c6cbe6be646358b52954151753c58ddb8e332016'
23
'1147db9a3f0edd4956068de77930148acce2742dd76d57f7239b2b1c687ac63f'
24
'89ad2c4f66dd29127527493e729c31e731f111cf10faf5774c3db9275ed0c22c'
25
'ed1716de95974bf47ab0223ca33734a0b5a5d09a181225d0e8ed62d070aea893')
26
_features=(--features cuda)
27
_helper_features=(--features cuda)
28
29
_cuda_architectures() {
30
local capabilities=''
31
if capabilities=$(nvidia-smi --query-gpu=compute_cap --format=csv,noheader 2>/dev/null); then
32
capabilities=$(sed -nE 's/^[[:space:]]*([0-9]+)\.([0-9]+)[[:space:]]*$/\1\2/p' <<< "$capabilities")
33
else
34
capabilities=''
35
fi
36
# Sandboxed and headless builders cannot query a GPU; expand the toolkit targets explicitly.
37
if [[ -z $capabilities ]]; then
38
capabilities=$(nvcc --list-gpu-arch | sed -nE 's/^compute_([0-9]+)$/\1/p')
39
fi
40
if [[ -z $capabilities ]]; then
41
printf '%s\n' 'Could not determine supported CUDA targets; set CMAKE_CUDA_ARCHITECTURES explicitly.' >&2
42
return 1
43
fi
44
sort -nu <<< "$capabilities" | paste -sd ';'
45
}
46
47
prepare() {
48
cd "meetily-$pkgver"
49
patch -Np1 -i "$srcdir/arch.patch"
50
install -Dm644 "$srcdir/SourceSans3VF-Upright.ttf" frontend/src/app/fonts/SourceSans3VF-Upright.ttf
51
# Keep Git and other build tools inside the package sandbox.
52
export RUSTUP_HOME="${RUSTUP_HOME:-$HOME/.rustup}"
53
export HOME="$srcdir/.home" XDG_CONFIG_HOME="$srcdir/.config"
54
install -dm700 "$HOME" "$XDG_CONFIG_HOME"
55
export XDG_CACHE_HOME="$srcdir/.cache" npm_config_cache="$srcdir/.cache/npm"
56
export PNPM_HOME="$srcdir/.pnpm-home" CARGO_HOME="$srcdir/.cargo"
57
export XDG_RUNTIME_DIR="$srcdir/.runtime"
58
install -dm700 "$XDG_RUNTIME_DIR"
59
# pnpm 12 reads overrides from the workspace file instead of package.json.
60
python -c 'import json; p=json.load(open("frontend/package.json")); json.dump(p["pnpm"], open("frontend/pnpm-workspace.yaml", "w"))'
61
pnpm --dir frontend install --frozen-lockfile --store-dir "$srcdir/.pnpm-store"
62
cargo fetch --locked
63
# Use Arch's maintained FFmpeg instead of downloading an untracked binary.
64
install -dm755 frontend/src-tauri/binaries
65
ln -sf /usr/bin/ffmpeg frontend/src-tauri/binaries/ffmpeg-x86_64-unknown-linux-gnu
66
}
67
68
build() {
69
cd "meetily-$pkgver"
70
# Keep Git and other build tools inside the package sandbox.
71
export RUSTUP_HOME="${RUSTUP_HOME:-$HOME/.rustup}"
72
export HOME="$srcdir/.home" XDG_CONFIG_HOME="$srcdir/.config"
73
install -dm700 "$HOME" "$XDG_CONFIG_HOME"
74
export XDG_CACHE_HOME="$srcdir/.cache" npm_config_cache="$srcdir/.cache/npm"
75
export PNPM_HOME="$srcdir/.pnpm-home" CARGO_HOME="$srcdir/.cargo"
76
export XDG_RUNTIME_DIR="$srcdir/.runtime"
77
export NEXT_TELEMETRY_DISABLED=1 NEXT_PUBLIC_DISABLE_UPDATER=1
78
# Use the bindings shipped with this Whisper version on newer Clang releases.
79
export WHISPER_DONT_GENERATE_BINDINGS=1
80
export CMAKE_POSITION_INDEPENDENT_CODE=ON
81
# Fetch and verify the pinned ONNX library through makepkg, before compilation.
82
export ORT_LIB_LOCATION="$srcdir/onnxruntime/lib"
83
export CARGO_TARGET_DIR="$srcdir/target"
84
export CUDA_PATH=/opt/cuda
85
export PATH="/opt/cuda/bin:$PATH"
86
# Explicit targets let llama.cpp select Blackwell's architecture-specific instructions.
87
if [[ -z ${CMAKE_CUDA_ARCHITECTURES:-} ]]; then
88
CMAKE_CUDA_ARCHITECTURES=$(_cuda_architectures) || return
89
fi
90
export CMAKE_CUDA_ARCHITECTURES
91
# Recent CCCL releases require an explicit iterator header.
92
export CMAKE_CUDA_FLAGS="${CMAKE_CUDA_FLAGS:-} --pre-include=cuda/iterator"
93
export CMAKE_CUDA_STANDARD=17 CMAKE_CXX_STANDARD=17
94
cargo build --locked --release -p llama-helper "${_helper_features[@]}"
95
install -m755 "$CARGO_TARGET_DIR/release/llama-helper" frontend/src-tauri/binaries/llama-helper-x86_64-unknown-linux-gnu
96
cd frontend
97
pnpm exec tauri build --no-bundle "${_features[@]}" -- --locked
98
}
99
100
check() {
101
test -x "$srcdir/target/release/meetily"
102
python - "$srcdir/target/release/llama-helper" <<'PY'
103
import json
104
import subprocess
105
import sys
106
result = subprocess.run([sys.argv[1]], input='{"type":"ping"}\n{"type":"shutdown"}\n',
107
text=True, capture_output=True, timeout=30, check=True)
108
assert [json.loads(line)['type'] for line in result.stdout.splitlines()] == ['pong', 'goodbye'], result.stdout
109
PY
110
}
111
112
package() {
113
install -Dm755 "$srcdir/target/release/meetily" "$pkgdir/usr/lib/meetily/meetily"
114
install -Dm755 "$srcdir/target/release/llama-helper" "$pkgdir/usr/lib/meetily/llama-helper"
115
install -dm755 "$pkgdir/usr/bin"
116
ln -s /usr/lib/meetily/meetily "$pkgdir/usr/bin/meetily"
117
install -Dm644 meetily.desktop "$pkgdir/usr/share/applications/meetily.desktop"
118
install -Dm644 "meetily-$pkgver/frontend/src-tauri/icons/icon.png" "$pkgdir/usr/share/icons/hicolor/1024x1024/apps/meetily.png"
119
install -Dm644 "meetily-$pkgver/LICENSE.md" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
120
install -Dm644 "meetily-$pkgver/frontend/src-tauri/templates/"*.json -t "$pkgdir/usr/share/meetily/templates/"
121
install -Dm644 "$srcdir/source-sans-LICENSE.md" "$pkgdir/usr/share/licenses/$pkgname/source-sans-LICENSE.md"
122
ln -s ../../share/meetily/templates "$pkgdir/usr/lib/meetily/templates"
123
}
124
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-30 17:58:32 | Low | 3 |
| 2026-10-30 17:56:37 | Medium | 3 |