mineradio
LOW
maintainer Sthn
1 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The npx command runs electron-builder to package the app locally from the project's own source; it does not execute arbitrary remote code or install untrusted packages.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The npx command runs electron-builder to package the app locally from the project's own source; it does not execute arbitrary remote code or install untrusted packages.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
npx/bunx/deno executes a remote package
remote_code_tool
`npx`/`bunx`/`pnpm dlx`/`deno run <url>` downloads AND runs a remote package at build time — the moral equivalent of piping a download into a shell. Severity downgraded: Node.js consumer context.
-
PKGBUILD:67
npx electron-builder --linux dir --config.electronDist=/usr/lib/electron43
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Sthn
2
#
3
# ─── 关于 / About ───────────────────────────────────────────────────────
4
# Mineradio 是一款沉浸式音乐播放器，融合天气电台、歌词舞台、粒子视觉和 3D 歌单架。
5
# 原项目由 XxHuberrr 设计与开发，仅支持 Windows。
6
# https://github.com/XxHuberrr/Mineradio
7
#
8
# 本 AUR 包是社区维护的 Linux 移植版，在原作者代码基础上做了以下适配：
9
# 1. GPU 渲染：移除 Windows 专属的 use-angle=d3d11 等开关，修复 Linux 下 GPU 崩溃
10
# 2. 图标格式：Linux 下使用 icon.png 替代 icon.ico（含 favicon）
11
# 3. 缓存路径：将 D:\MineradioCache 改为 ~/.cache/Mineradio（符合 XDG 规范，含 beatmap）
12
# 4. 窗口配置：Linux 下关闭透明窗口（Wayland 渲染异常），保留无边框自带标题栏
13
# 5. 全屏：Linux 下跳过 setResizable guard（与 setFullScreen 冲突），全屏保持标题栏显示并避开登录信息重叠
14
# 6. 桌面歌词：Linux 下窗口可交互（中键切换锁定 + 左键拖动）；Wayland 无法全局监听中键，故锁定后不再点击穿透
15
# 7. 构建配置：package.json 添加 electron-builder Linux 构建目标
16
#
17
# 登录彩蛋：登录前有一道"世界和平"彩蛋门。解锁方式：
18
# 点右上角"扫码登录" → 连续点击眼睛图标 5 次（有提示）→ 输入"世界和平" → 解锁登录界面。
19
#
20
# 所有视觉设计、品牌、核心代码版权归原作者 XxHuberrr 所有。
21
# 本包遵循 GPL-3.0 授权。第三方音乐平台接入仅用于个人学习，请遵守各平台用户协议。
22
23
pkgname=mineradio
24
pkgver=2.1.0
25
pkgrel=1
26
pkgdesc='沉浸式音乐播放器，融合天气电台、歌词舞台、粒子视觉和 3D 歌单架 (Linux port, 原作者 XxHuberrr)'
27
arch=('x86_64')
28
url='https://github.com/XxHuberrr/Mineradio'
29
license=('GPL-3.0-only')
30
depends=(
31
'electron'
32
'gtk3'
33
'libxss'
34
'nss'
35
'alsa-lib'
36
'mpg123'
37
'ffmpeg'
38
'xdg-utils'
39
)
40
makedepends=(
41
'nodejs'
42
'npm'
43
'git'
44
)
45
provides=('mineradio')
46
conflicts=('mineradio-git')
47
install=mineradio.install
48
source=("$pkgname-$pkgver.tar.gz::https://github.com/XxHuberrr/Mineradio/archive/refs/tags/v$pkgver.tar.gz"
49
'mineradio.desktop'
50
'mineradio.sh'
51
'apply-linux-fixes.py')
52
sha256sums=('SKIP'
53
'SKIP'
54
'SKIP'
55
'SKIP')
56
57
build() {
58
cd "$srcdir/Mineradio-$pkgver"
59
60
# Apply Linux compatibility fixes (icon, GPU switches, cache path, window/fullscreen/lyrics)
61
python3 "$srcdir/apply-linux-fixes.py" .
62
63
# Install npm dependencies (including devDependencies for electron-builder)
64
npm install --prefer-offline
65
66
# Build Linux directory using system Electron (no download needed)
67
npx electron-builder --linux dir --config.electronDist=/usr/lib/electron43
68
}
69
70
package() {
71
cd "$srcdir/Mineradio-$pkgver"
72
73
# Install only the app resources (not the bundled Electron binary)
74
# System Electron will be used at runtime via the wrapper script
75
install -dm755 "$pkgdir/opt/mineradio"
76
cp -r dist/linux-unpacked/resources "$pkgdir/opt/mineradio/"
77
78
# Make the wrapper script executable and install it
79
install -Dm755 "$srcdir/mineradio.sh" "$pkgdir/usr/bin/mineradio"
80
81
# Install desktop file
82
install -Dm644 "$srcdir/mineradio.desktop" "$pkgdir/usr/share/applications/mineradio.desktop"
83
84
# Install icon
85
install -Dm644 build/icon.png "$pkgdir/usr/share/icons/hicolor/512x512/apps/mineradio.png"
86
}
87
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |