neomusic

LOW

maintainer tashila 0 votes scanned 2026-09-16 17:23:26.193762

View on AUR

Why flagged

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: Tashila Pathum <neomusicapp@gmail.com>
    
      2#
    
      3# The AUR recipe, pushed to aur.archlinux.org/neomusic.git together with the .SRCINFO beside it.
    
      4# The desktop source is not public, so this fetches the published release tarball and copies it
    
      5# into place — there is no build(). packaging/arch/PKGBUILD is the other recipe: it builds from a
    
      6# local checkout, for testing an install of an unreleased build.
    
      7
    
      8pkgname=neomusic
    
      9# Mirrors neomusic.version in gradle.properties; VersionSyncTest fails if the two disagree.
    
      10# A repackage of the same app version bumps pkgrel, not pkgver.
    
      11pkgver=0.1.0
    
      12pkgrel=1
    
      13pkgdesc="Retro CD-player music app with a cyberpunk LCD UI"
    
      14url="https://neomusic.tashila.me"
    
      15arch=('x86_64')
    
      16license=('LicenseRef-NeoMusic')
    
      17# Kept equal to packaging/arch/PKGBUILD by PackageMetadataSyncTest; the reasoning for the list,
    
      18# and for what namcap reports that is deliberately left out, is there.
    
      19depends=('gstreamer' 'gst-plugins-base' 'gst-plugins-good' 'gst-plugins-bad' 'gst-plugins-ugly'
    
      20         'gst-libav' 'libglvnd' 'libx11' 'fontconfig' 'libxext' 'libxi' 'libxrender' 'libxtst'
    
      21         'zlib' 'hicolor-icon-theme')
    
      22options=('!strip')  # the app image is a jlink runtime; re-stripping it can break the JVM image
    
      23# Desktop releases are tagged linux-v<ver>: the repo's v* tags belong to the Android app.
    
      24_release="https://github.com/tashilapathum/NeoMusic/releases/download/linux-v$pkgver"
    
      25source=("$_release/$pkgname-$pkgver-linux-$CARCH.tar.gz")
    
      26sha256sums=('be00c48727c8520d9708dd966fb8c6cc4db3a798b128fa17ca51ba78ae32fa5e')
    
      27
    
      28package() {
    
      29  # The tarball is already the installed tree: /opt/neomusic, the /usr/bin/neomusic wrapper, the
    
      30  # desktop entry, the MIME globs, the hicolor icons and /usr/share/licenses/neomusic. cp -a keeps
    
      31  # the jlink runtime's file modes.
    
      32  cp -a "$srcdir/$pkgname-$pkgver"/{opt,usr} "$pkgdir"/
    
      33}
    
      34

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-16 17:23:26	Low	1