moroder-bin
The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal distribution method; the low severity is due to unverifiable origin of the binary and lack of source build, but no active malicious behavior is present.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal distribution method; the low severity is due to unverifiable origin of the binary and lack of source build, but no active malicious behavior is present.
PKGBUILD
pkgname=moroder-bin
pkgver=1.0.1
pkgrel=1
pkgdesc="YouTube Music TUI with album art, MPRIS, Discord rich presence and minimal dependencies"
arch=('x86_64')
url="https://github.com/orrnithogalum/moroder"
license=('AGPL-3.0-or-later' 'LicenseRef-discord-social-sdk')
depends=('glibc' 'gcc-libs' 'mpv' 'curl' 'systemd-libs' 'libx11' 'yt-dlp')
provides=('moroder')
conflicts=('moroder')
options=('!strip')
_dir="moroder-$pkgver-linux-x86_64"
source=("$_dir.tar.gz::$url/releases/download/v$pkgver/$_dir.tar.gz")
md5sums=('639085820a0131a69d6291f35986bf9a')
package() {
cd "$_dir"
install -Dm755 moroder "$pkgdir/usr/bin/moroder"
install -Dm644 libdiscord_partner_sdk.so "$pkgdir/usr/lib/libdiscord_partner_sdk.so"
install -Dm644 README.md "$pkgdir/usr/share/doc/$pkgname/README.md"
install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
install -Dm644 License-Notices.txt "$pkgdir/usr/share/licenses/$pkgname/License-Notices.txt"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-13 17:14:56 | Low | 2 |