molpe-bin

LOW

maintainer Nk_YMZ 0 votes scanned 2026-09-19 17:30:41.880415

View on AUR

Why flagged

The package installs a prebuilt binary from the project's official GitHub releases, which is a normal practice for AUR; the source is verifiable and signed by the project, posing no inherent risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's official GitHub releases, which is a normal practice for AUR; the source is verifiable and signed by the project, posing no inherent risk.

PKGBUILD

      1# Maintainer: Nk-YMZ <village_flute@outlook.com>
    
      2
    
      3pkgname=molpe-bin
    
      4pkgver=1.0.0
    
      5pkgrel=1
    
      6pkgdesc='Linux 终端中的网易云音乐 TUI 播放器（预编译版本）'
    
      7arch=('x86_64')
    
      8url='https://github.com/Nk-YMZ/Molpe'
    
      9license=('MIT')
    
      10depends=('glibc' 'mpv')
    
      11provides=("molpe=${pkgver}")
    
      12conflicts=('molpe')
    
      13options=('!strip' '!debug')
    
      14source_x86_64=("${url}/releases/download/v${pkgver}/molpe-${pkgver}-1-${CARCH}.pkg.tar.zst")
    
      15b2sums_x86_64=('631b53898dda08347a14d10b5c211bebdac549c8401e11cdeb1220013b1cfb59b4048e9858c3ac92b25a067bc9928f4411e28730d23ef4600339f5abb0fa58df')
    
      16
    
      17package() {
    
      18	install -Dm755 "$srcdir/usr/bin/molpe" "$pkgdir/usr/bin/molpe"
    
      19	install -Dm644 "$srcdir/usr/share/licenses/molpe/LICENSE" \
    
      20		"$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      21}
    
      22

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-19 17:30:41	Low	2