midi-hook

LOW
maintainer modinfo 0 votes scanned 2026-08-25 13:26:42.022164
View on AUR
Why flagged

The package downloads prebuilt binaries from the project's own GitHub releases, which is a normal practice; the low severity is due to the lack of source build and recent upload with few votes, but the checksums are verified and the host is plausibly official.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads prebuilt binaries from the project's own GitHub releases, which is a normal practice; the low severity is due to the lack of source build and recent upload with few votes, but the checksums are verified and the host is plausibly official.

PKGBUILD

1# Maintainer: Sebastian Korotkiewicz <skorotkiewicz@gmail.com>
2pkgname=midi-hook
3pkgver=0.2.0
4pkgrel=1
5pkgdesc="Map MIDI notes to keyboard shortcuts and shell commands"
6arch=('x86_64' 'aarch64')
7url="https://github.com/skorotkiewicz/midi-hook"
8license=('MIT')
9depends=('alsa-lib' 'gcc-libs')
10makedepends=()
11options=(!strip)
12
13source_x86_64=("$pkgname-$pkgver-$pkgrel-x86_64.tar.gz::$url/releases/download/v$pkgver/$pkgname-v$pkgver-x86_64-unknown-linux-gnu.tar.gz")
14source_aarch64=("$pkgname-$pkgver-$pkgrel-aarch64.tar.gz::$url/releases/download/v$pkgver/$pkgname-v$pkgver-aarch64-unknown-linux-gnu.tar.gz")
15
16sha256sums_x86_64=('263860d491e918b495986df49f917f11d10fc788b4f3c6f7c42040b6ecb54c5d')
17sha256sums_aarch64=('bbca388fc6f72a5bb300e3768eba5d81d9df9fb30c413bc5980c4d1e6da67960')
18
19package() {
20 install -Dm755 midi-hook "$pkgdir/usr/bin/midi-hook"
21 install -Dm644 README.md "$pkgdir/usr/share/doc/$pkgname/README.md"
22 install -Dm644 commands.conf.example "$pkgdir/usr/share/doc/$pkgname/commands.conf.example"
23}
24

Scan history

Scanned at (UTC)SeverityRules
2026-08-25 13:26:42 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion