midi-hook
The package downloads prebuilt binaries from the project's own GitHub releases, which is a normal practice; the low severity is due to the lack of source build and recent upload with few votes, but the checksums are verified and the host is plausibly official.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads prebuilt binaries from the project's own GitHub releases, which is a normal practice; the low severity is due to the lack of source build and recent upload with few votes, but the checksums are verified and the host is plausibly official.
PKGBUILD
# Maintainer: Sebastian Korotkiewicz <skorotkiewicz@gmail.com>
pkgname=midi-hook
pkgver=0.2.0
pkgrel=1
pkgdesc="Map MIDI notes to keyboard shortcuts and shell commands"
arch=('x86_64' 'aarch64')
url="https://github.com/skorotkiewicz/midi-hook"
license=('MIT')
depends=('alsa-lib' 'gcc-libs')
makedepends=()
options=(!strip)
source_x86_64=("$pkgname-$pkgver-$pkgrel-x86_64.tar.gz::$url/releases/download/v$pkgver/$pkgname-v$pkgver-x86_64-unknown-linux-gnu.tar.gz")
source_aarch64=("$pkgname-$pkgver-$pkgrel-aarch64.tar.gz::$url/releases/download/v$pkgver/$pkgname-v$pkgver-aarch64-unknown-linux-gnu.tar.gz")
sha256sums_x86_64=('263860d491e918b495986df49f917f11d10fc788b4f3c6f7c42040b6ecb54c5d')
sha256sums_aarch64=('bbca388fc6f72a5bb300e3768eba5d81d9df9fb30c413bc5980c4d1e6da67960')
package() {
install -Dm755 midi-hook "$pkgdir/usr/bin/midi-hook"
install -Dm644 README.md "$pkgdir/usr/share/doc/$pkgname/README.md"
install -Dm644 commands.conf.example "$pkgdir/usr/share/doc/$pkgname/commands.conf.example"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-25 13:26:42 | Low | 2 |