monochrome-desktop-bin

LOW

maintainer shakakibara 0 votes scanned 2026-09-22 03:36:46.988110

View on AUR

Why flagged

The package installs a prebuilt .deb from the project's official GitHub releases, which is a normal distribution method; the binary is not obfuscated or executed remotely, and the source is verifiable via checksum.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt .deb from the project's official GitHub releases, which is a normal distribution method; the binary is not obfuscated or executed remotely, and the source is verifiable via checksum.

PKGBUILD

      1# Maintainer: Shakakibara <aryan.1843@disroot.org>
    
      2
    
      3pkgname='monochrome-desktop-bin'
    
      4_pkgname='Monochrome.Desktop'
    
      5pkgver=2.0.14
    
      6pkgrel=2
    
      7pkgdesc='Stream and download millions of Hi-Res FLACs, all for free on Monochrome.'
    
      8arch=('x86_64')
    
      9url='https://github.com/monochrome-music/monochrome'
    
      10license=('Apache-2.0')
    
      11depends=('gtk3' 'webkit2gtk-4.1' 'libappindicator')
    
      12options=('!strip')
    
      13provides=("${pkgname}")
    
      14conflicts=("${pkgname}")
    
      15source=("https://github.com/monochrome-music/desktop-app/releases/download/v${pkgver}/${_pkgname}_${pkgver}_amd64.deb")
    
      16sha256sums=('24ddb66d2961e07fe997bc6836b7901f9225e2eaf369d4e22e65f72840a78e90')
    
      17
    
      18package() {
    
      19      # Extract
    
      20      bsdtar -xf data.tar.* -C "$pkgdir/"
    
      21}
    
      22

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-22 03:36:46	Low	2