nipaplay-reload

LOW

maintainer willker 0 votes scanned 2026-08-20 19:12:21.626580

View on AUR

Why flagged

The package builds from the project's own source repositories with some submodules having SKIP'd checksums, but no remote code execution or untrusted prebuilt binaries are involved; the main risk is reduced verifiability of submodule sources.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from the project's own source repositories with some submodules having SKIP'd checksums, but no remote code execution or untrusted prebuilt binaries are involved; the main risk is reduced verifiability of submodule sources.

PKGBUILD

      1# Maintainer: hiruocha <hiruocha[at]outlook[dot]com>
    
      2
    
      3pkgname=nipaplay-reload
    
      4pkgver=1.11.4
    
      5pkgrel=1
    
      6pkgdesc="A cross platform danmaku video player"
    
      7arch=('x86_64')
    
      8url="https://github.com/AimesSoft/NipaPlay-Reload"
    
      9license=('GPL-3.0-or-later')
    
      10conflicts=("${pkgname%-reload}")
    
      11
    
      12depends=('gtk3'
    
      13         'mpv'
    
      14         'ffmpeg'
    
      15         'libass'
    
      16         'sqlite'
    
      17         'libkeybinder3'
    
      18         'alsa-lib'
    
      19         'libayatana-appindicator'
    
      20         'libevdev'
    
      21         'gstreamer'
    
      22         'libc++')
    
      23makedepends=('clang'
    
      24             'cmake'
    
      25             'ninja'
    
      26             'pkg-config'
    
      27             'fvm'
    
      28             'git'
    
      29             'llvm'
    
      30             'cargo'
    
      31             'python'
    
      32             'patchelf')
    
      33source=("git+https://github.com/AimesSoft/NipaPlay-Reload.git#tag=v$pkgver"
    
      34        "git+https://github.com/AimesSoft/media-kit.git"
    
      35        "git+https://github.com/AimesSoft/libmpv-darwin-build.git"
    
      36        "git+https://github.com/AimesSoft/mpv.git"
    
      37        "git+https://github.com/AimesSoft/libplacebo.git"
    
      38        "fix-dart-path.patch"
    
      39        "use-system-cargo.patch")
    
      40sha256sums=('23816a89a8d14dacb149c4526d00068856648c4c574db82c47eee7d4b3213dae'
    
      41            'SKIP'
    
      42            'SKIP'
    
      43            'SKIP'
    
      44            'SKIP'
    
      45            '5571b73e8f03a9fa1d4821486bbb0cf1c362180f6c68d26e9477d7cf35b71d51'
    
      46            'c1a31687404dd9cf73cd415ead0a4940410b3a1a19e000d539e610e6bfd422b0')
    
      47
    
      48prepare() {
    
      49  cd "$srcdir/NipaPlay-Reload"
    
      50
    
      51  git submodule init
    
      52  git config submodule.third_party/media-kit-upstream.url "$srcdir/media-kit"
    
      53  git config submodule.third_party/libmpv-darwin-build.url "$srcdir/libmpv-darwin-build"
    
      54  git config submodule.third_party/mpv.url "$srcdir/mpv"
    
      55  git config submodule.third_party/libplacebo.url "$srcdir/libplacebo"
    
      56  git -c protocol.file.allow=always submodule update
    
      57
    
      58  patch -Np1 -i "$srcdir/fix-dart-path.patch"
    
      59  patch -Np1 -i "$srcdir/use-system-cargo.patch"
    
      60
    
      61  local flutter_version
    
      62  flutter_version=$(tr -d '[:space:]' < .flutter-version-linux)
    
      63  fvm install "$flutter_version"
    
      64  fvm use "$flutter_version"
    
      65
    
      66  python .github/workflows/scripts/generate-build-info-json.py assets/build_info.json
    
      67
    
      68  fvm dart run tool/configure_flutter_dependencies.dart linux
    
      69  fvm flutter pub get
    
      70}
    
      71
    
      72build() {
    
      73  cd "$srcdir/NipaPlay-Reload"
    
      74  fvm flutter build linux --release -v
    
      75}
    
      76
    
      77package() {
    
      78  cd "$srcdir/NipaPlay-Reload"
    
      79
    
      80  install -dm755 "$pkgdir/opt/${pkgname%-reload}"
    
      81  cp -r build/linux/x64/release/bundle/* "$pkgdir/opt/${pkgname%-reload}/"
    
      82
    
      83  find "$pkgdir/opt/${pkgname%-reload}" -name '*.so' -exec patchelf --remove-rpath {} \;
    
      84
    
      85  install -Dm755 assets/linux/launcher.sh "$pkgdir/opt/${pkgname%-reload}/launcher.sh"
    
      86
    
      87  install -Dm644 assets/linux/io.github.MCDFsteve.NipaPlay-Reload.desktop \
    
      88    "$pkgdir/usr/share/applications/io.github.MCDFsteve.NipaPlay-Reload.desktop"
    
      89  install -Dm644 assets/images/logo512.png \
    
      90    "$pkgdir/usr/share/icons/hicolor/512x512/apps/io.github.MCDFsteve.NipaPlay-Reload.png"
    
      91
    
      92  install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      93}
    
      94

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-20 19:12:21	Low	2