meetily-vulkan
LOW
maintainer Snoopey
0 votes
scanned 2026-10-30 17:58:32.625252
Why flagged
The only non-standard host is cdn.pyke.io serving an ONNX Runtime prebuilt library (ort-rs/ms@1.22.0), which is the official distribution CDN for the ort-rs Rust crate's prebuilt ONNX Runtime binaries; it has a pinned sha256 checksum, is fetched before compilation and used only as a link-time library, and the rest of the build compiles from the project's own GitHub source tarball with all checksums verified.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 75%): The only non-standard host is cdn.pyke.io serving an ONNX Runtime prebuilt library (ort-rs/ms@1.22.0), which is the official distribution CDN for the ort-rs Rust crate's prebuilt ONNX Runtime binaries; it has a pinned sha256 checksum, is fetched before compilation and used only as a link-time library, and the rest of the build compiles from the project's own GitHub source tarball with all checksums verified.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:20
'onnxruntime-1.22.0-x86_64.tgz::https://cdn.pyke.io/0/pyke:ort-rs/ms@1.22.0/x86_64-unknown-linux-gnu.tgz')
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Snoopey
2
pkgname=meetily-vulkan
3
pkgver=0.4.1
4
pkgrel=2
5
pkgdesc='Local meeting transcription and summaries (AMD, Intel and NVIDIA Vulkan build)'
6
arch=('x86_64')
7
url='https://github.com/Zackriya-Solutions/meetily'
8
license=('MIT' 'OFL-1.1')
9
depends=('glibc' 'libgcc' 'libstdc++' 'libgomp' 'dbus' 'cairo' 'hicolor-icon-theme'
10
'glib2' 'gdk-pixbuf2' 'xz' 'libsoup3' 'xdg-utils' 'alsa-lib' 'ffmpeg' 'gtk3' 'libappindicator-gtk3' 'openssl' 'webkit2gtk-4.1' 'vulkan-icd-loader' 'vulkan-driver')
11
makedepends=('clang' 'cmake' 'git' 'nodejs>=20' 'pnpm' 'rust' 'python' 'vulkan-headers' 'shaderc')
12
provides=("meetily=$pkgver")
13
conflicts=('meetily')
14
optdepends=('ollama: local Ollama model provider')
15
options=('!lto' '!debug')
16
source=("meetily-$pkgver.tar.gz::$url/archive/refs/tags/v$pkgver.tar.gz"
17
'arch.patch' 'meetily.desktop'
18
'SourceSans3VF-Upright.ttf::https://raw.githubusercontent.com/adobe-fonts/source-sans/3.052R/VF/SourceSans3VF-Upright.ttf'
19
'source-sans-LICENSE.md::https://raw.githubusercontent.com/adobe-fonts/source-sans/3.052R/LICENSE.md'
20
'onnxruntime-1.22.0-x86_64.tgz::https://cdn.pyke.io/0/pyke:ort-rs/ms@1.22.0/x86_64-unknown-linux-gnu.tgz')
21
sha256sums=('66f06a1c4b60334d1c6d62c5f97bc5e847df33e98240ef125be01bacb7274b88'
22
'47f7a3f53dcb7b6380871c319d9db7de74642108f082469affe5fbbf0c887f63' '5e7e443ebafc9c2cdedede09c6cbe6be646358b52954151753c58ddb8e332016'
23
'1147db9a3f0edd4956068de77930148acce2742dd76d57f7239b2b1c687ac63f'
24
'89ad2c4f66dd29127527493e729c31e731f111cf10faf5774c3db9275ed0c22c'
25
'ed1716de95974bf47ab0223ca33734a0b5a5d09a181225d0e8ed62d070aea893')
26
_features=(--features vulkan)
27
_helper_features=(--features vulkan)
28
29
prepare() {
30
cd "meetily-$pkgver"
31
patch -Np1 -i "$srcdir/arch.patch"
32
install -Dm644 "$srcdir/SourceSans3VF-Upright.ttf" frontend/src/app/fonts/SourceSans3VF-Upright.ttf
33
# Keep Git and other build tools inside the package sandbox.
34
export RUSTUP_HOME="${RUSTUP_HOME:-$HOME/.rustup}"
35
export HOME="$srcdir/.home" XDG_CONFIG_HOME="$srcdir/.config"
36
install -dm700 "$HOME" "$XDG_CONFIG_HOME"
37
export XDG_CACHE_HOME="$srcdir/.cache" npm_config_cache="$srcdir/.cache/npm"
38
export PNPM_HOME="$srcdir/.pnpm-home" CARGO_HOME="$srcdir/.cargo"
39
export XDG_RUNTIME_DIR="$srcdir/.runtime"
40
install -dm700 "$XDG_RUNTIME_DIR"
41
# pnpm 12 reads overrides from the workspace file instead of package.json.
42
python -c 'import json; p=json.load(open("frontend/package.json")); json.dump(p["pnpm"], open("frontend/pnpm-workspace.yaml", "w"))'
43
pnpm --dir frontend install --frozen-lockfile --store-dir "$srcdir/.pnpm-store"
44
cargo fetch --locked
45
# Use Arch's maintained FFmpeg instead of downloading an untracked binary.
46
install -dm755 frontend/src-tauri/binaries
47
ln -sf /usr/bin/ffmpeg frontend/src-tauri/binaries/ffmpeg-x86_64-unknown-linux-gnu
48
}
49
50
build() {
51
cd "meetily-$pkgver"
52
# Keep Git and other build tools inside the package sandbox.
53
export RUSTUP_HOME="${RUSTUP_HOME:-$HOME/.rustup}"
54
export HOME="$srcdir/.home" XDG_CONFIG_HOME="$srcdir/.config"
55
install -dm700 "$HOME" "$XDG_CONFIG_HOME"
56
export XDG_CACHE_HOME="$srcdir/.cache" npm_config_cache="$srcdir/.cache/npm"
57
export PNPM_HOME="$srcdir/.pnpm-home" CARGO_HOME="$srcdir/.cargo"
58
export XDG_RUNTIME_DIR="$srcdir/.runtime"
59
export NEXT_TELEMETRY_DISABLED=1 NEXT_PUBLIC_DISABLE_UPDATER=1
60
# Use the bindings shipped with this Whisper version on newer Clang releases.
61
export WHISPER_DONT_GENERATE_BINDINGS=1
62
export CMAKE_POSITION_INDEPENDENT_CODE=ON
63
# Fetch and verify the pinned ONNX library through makepkg, before compilation.
64
export ORT_LIB_LOCATION="$srcdir/onnxruntime/lib"
65
export CARGO_TARGET_DIR="$srcdir/target"
66
cargo build --locked --release -p llama-helper "${_helper_features[@]}"
67
install -m755 "$CARGO_TARGET_DIR/release/llama-helper" frontend/src-tauri/binaries/llama-helper-x86_64-unknown-linux-gnu
68
cd frontend
69
pnpm exec tauri build --no-bundle "${_features[@]}" -- --locked
70
}
71
72
check() {
73
test -x "$srcdir/target/release/meetily"
74
python - "$srcdir/target/release/llama-helper" <<'PY'
75
import json
76
import subprocess
77
import sys
78
result = subprocess.run([sys.argv[1]], input='{"type":"ping"}\n{"type":"shutdown"}\n',
79
text=True, capture_output=True, timeout=30, check=True)
80
assert [json.loads(line)['type'] for line in result.stdout.splitlines()] == ['pong', 'goodbye'], result.stdout
81
PY
82
}
83
84
package() {
85
install -Dm755 "$srcdir/target/release/meetily" "$pkgdir/usr/lib/meetily/meetily"
86
install -Dm755 "$srcdir/target/release/llama-helper" "$pkgdir/usr/lib/meetily/llama-helper"
87
install -dm755 "$pkgdir/usr/bin"
88
ln -s /usr/lib/meetily/meetily "$pkgdir/usr/bin/meetily"
89
install -Dm644 meetily.desktop "$pkgdir/usr/share/applications/meetily.desktop"
90
install -Dm644 "meetily-$pkgver/frontend/src-tauri/icons/icon.png" "$pkgdir/usr/share/icons/hicolor/1024x1024/apps/meetily.png"
91
install -Dm644 "meetily-$pkgver/LICENSE.md" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
92
install -Dm644 "meetily-$pkgver/frontend/src-tauri/templates/"*.json -t "$pkgdir/usr/share/meetily/templates/"
93
install -Dm644 "$srcdir/source-sans-LICENSE.md" "$pkgdir/usr/share/licenses/$pkgname/source-sans-LICENSE.md"
94
ln -s ../../share/meetily/templates "$pkgdir/usr/lib/meetily/templates"
95
}
96
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-30 17:58:32 | Low | 3 |
| 2026-10-30 17:56:37 | Medium | 3 |