mp4ff-bin

LOW
maintainer agony4001 0 votes scanned 2026-10-28 07:49:59.681246
View on AUR
Why flagged

The package downloads prebuilt binaries from the project's official GitHub releases, which is a normal and trusted practice; the low severity is due to the static rule about few votes and recent upload, not due to any malicious or risky behavior in the PKGBUILD.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads prebuilt binaries from the project's official GitHub releases, which is a normal and trusted practice; the low severity is due to the static rule about few votes and recent upload, not due to any malicious or risky behavior in the PKGBUILD.

PKGBUILD

1# Maintainer: agony <27015 at riseup dot net>
2
3pkgname=mp4ff-bin
4pkgver=0.61.0
5pkgrel=1
6pkgdesc='Tools for parsing and manipulating MP4/ISOBMFF files (prebuilt)'
7arch=('x86_64' 'aarch64')
8url='https://github.com/Eyevinn/mp4ff'
9license=('MIT')
10provides=("mp4ff=${pkgver}")
11conflicts=('mp4ff')
12_release="${url}/releases/download/v${pkgver}"
13source_x86_64=("${_release}/mp4ff_${pkgver}_linux_amd64.tar.gz")
14source_aarch64=("${_release}/mp4ff_${pkgver}_linux_arm64.tar.gz")
15sha256sums_x86_64=('9bd523a82d2750e5f8cc46afd006a9574a90d7a189dcd97bde2a8c1eb526e684')
16sha256sums_aarch64=('255d32e70eb9f6a028b413d9b793ac64d6590ad1cfe9c63de3bf6984682ac4a7')
17
18package() {
19 install -Dm755 mp4ff-* -t "${pkgdir}/usr/bin"
20 install -Dm644 LICENSE -t "${pkgdir}/usr/share/licenses/${pkgname}"
21}
22

Scan history

Scanned at (UTC)SeverityRules
2026-10-28 07:49:59 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion