momentum-git

LOW

maintainer timmo001 0 votes scanned 2026-10-08 00:28:03.132797

View on AUR

Why flagged

Package builds from a legitimate project Git repository, uses standard build流程, and installs only the resulting binaries and completions; the low severity is due to few votes and recent upload, not malicious content.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): Package builds from a legitimate project Git repository, uses standard build流程, and installs only the resulting binaries and completions; the low severity is due to few votes and recent upload, not malicious content.

PKGBUILD

      1#!/bin/sh
    
      2# Maintainer: Aidan Timson (Timmo) <aidan@timmo.dev>
    
      3pkgname=momentum-git
    
      4pkgver=0.1.0.r65.gc3bb71d
    
      5pkgrel=1
    
      6pkgdesc="CLI for Sennheiser Momentum 4 headphones (git version)"
    
      7arch=('x86_64' 'aarch64')
    
      8url="https://github.com/timmo001/omarchy-momentumctl"
    
      9license=('Apache-2.0')
    
      10makedepends=('git' 'bun')
    
      11depends=('glibc' 'bluez-utils')
    
      12provides=('momentum')
    
      13conflicts=('momentum' 'momentum-bin')
    
      14options=('!strip')
    
      15source=("$pkgname::git+https://github.com/timmo001/omarchy-momentumctl.git")
    
      16md5sums=('SKIP')
    
      17
    
      18pkgver() {
    
      19  cd "$pkgname"
    
      20  local version
    
      21  version=$(git describe --long --tags --abbrev=7 2>/dev/null | sed 's/^v//;s/\([^-]*-g\)/r\1/;s/-/./g')
    
      22  if [ -n "$version" ]; then
    
      23    printf '%s' "$version"
    
      24  else
    
      25    printf "0.1.0.r%s.g%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
    
      26  fi
    
      27}
    
      28
    
      29build() {
    
      30  cd "$pkgname"
    
      31  bun install --frozen-lockfile
    
      32  bun run build
    
      33  ./dist/momentum --completions zsh >momentum.zsh
    
      34  ./dist/momentum --completions bash >momentum.bash
    
      35  ./dist/momentum --completions fish >momentum.fish
    
      36}
    
      37
    
      38package() {
    
      39  cd "$srcdir/$pkgname"
    
      40  install -Dm755 dist/momentum "$pkgdir/usr/bin/momentum"
    
      41  install -Dm644 momentum.zsh "$pkgdir/usr/share/zsh/site-functions/_momentum"
    
      42  install -Dm644 momentum.bash "$pkgdir/usr/share/bash-completion/completions/momentum"
    
      43  install -Dm644 momentum.fish "$pkgdir/usr/share/fish/vendor_completions.d/momentum.fish"
    
      44  install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      45}
    
      46

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-08 00:28:03	Low	2
2026-10-08 00:07:12	Low	2