nocturne

maintainer mhdi · 4 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds from the project's own source tarball on GitHub, which is a normal AUR practice; the recent orphan/re-adopt status does not indicate inherent danger.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from the project's own source tarball on GitHub, which is a normal AUR practice; the recent orphan/re-adopt status does not indicate inherent danger.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer:
    
      2# Contributor: Muhammed Emin Akalan <muhammedeminakalan@akalan.dev>
    
      3
    
      4pkgname=nocturne
    
      5pkgver=1.5.1
    
      6pkgrel=1
    
      7pkgdesc="Bring your music library together"
    
      8arch=('any')
    
      9url="https://github.com/Jeffser/Nocturne"
    
      10license=('GPL-3.0-or-later')
    
      11depends=('dconf'
    
      12         'glib2'
    
      13         'gstreamer'
    
      14         'gtk4'
    
      15         'hicolor-icon-theme'
    
      16         'libadwaita'
    
      17         'libportal'
    
      18         'libportal-gtk4'
    
      19         'libsecret'
    
      20         'pango'
    
      21         'python'
    
      22         'python-colorthief'
    
      23         'python-gobject'
    
      24         'python-mpris_server'
    
      25         'python-pillow'
    
      26         'python-pydbus'
    
      27         'python-requests'
    
      28         'python-syncedlyrics'
    
      29         'python-tinytag'
    
      30         'python-urllib3')
    
      31makedepends=('blueprint-compiler' 'meson')
    
      32source=("${pkgname}-${pkgver}.tar.gz::${url}/archive/${pkgver}.tar.gz")
    
      33sha256sums=('c8706fb9ebdd26fa890736d23cb2829c93bb1d48a0647a0adb634caa085c68e2')
    
      34
    
      35build() {
    
      36    arch-meson "${pkgname^}-${pkgver}" build
    
      37    meson compile -C build
    
      38}
    
      39
    
      40package() {
    
      41    meson install -C build --destdir "${pkgdir}"
    
      42}
    
      43

Changes since previous scan

--- PKGBUILD @ 2026-07-31 00:14
+++ PKGBUILD @ 2026-08-03 00:08
@@ -1,44 +1,43 @@
-# Maintainer: Muhammed Emin Akalan <muhammedeminakalan@akalan.dev>
+# Maintainer:
+# Contributor: Muhammed Emin Akalan <muhammedeminakalan@akalan.dev>
 
 pkgname=nocturne
-_name=Nocturne
-pkgver=1.0.0
+pkgver=1.5.1
 pkgrel=1
-
 pkgdesc="Bring your music library together"
 arch=('any')
 url="https://github.com/Jeffser/Nocturne"
 license=('GPL-3.0-or-later')
-
-depends=(
-  'libadwaita'
-  'python-cairo'
-  'python-colorthief'
-  'python-favicon'
-  'python-mpris_server'
-  'python-pillow'
-  'python-tinytag'
-  'python-syncedlyrics'
-)
-
-makedepends=(
-  'blueprint-compiler'
-  'meson'
-)
-
-source=("$pkgname-$pkgver.tar.gz::https://github.com/Jeffser/$_name/archive/refs/tags/$pkgver.tar.gz")
-sha256sums=('5516930fa4199af575325b8f5919b707116575782976acf2957cac04a968aa8a')
+depends=('dconf'
+         'glib2'
+         'gstreamer'
+         'gtk4'
+         'hicolor-icon-theme'
+         'libadwaita'
+         'libportal'
+         'libportal-gtk4'
+         'libsecret'
+         'pango'
+         'python'
+         'python-colorthief'
+         'python-gobject'
+         'python-mpris_server'
+         'python-pillow'
+         'python-pydbus'
+         'python-requests'
+         'python-syncedlyrics'
+         'python-tinytag'
+         'python-urllib3')
+makedepends=('blueprint-compiler' 'meson')
+source=("${pkgname}-${pkgver}.tar.gz::${url}/archive/${pkgver}.tar.gz")
+sha256sums=('c8706fb9ebdd26fa890736d23cb2829c93bb1d48a0647a0adb634caa085c68e2')
 
 build() {
-  cd "$_name-$pkgver"
-  
-  arch-meson build
-  meson compile -C build
+    arch-meson "${pkgname^}-${pkgver}" build
+    meson compile -C build
 }
 
 package() {
-  cd "$_name-$pkgver"
-  
-  DESTDIR="$pkgdir" meson install -C build
+    meson install -C build --destdir "${pkgdir}"
 }
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 15:18:17	MEDIUM	1
2026-07-31 00:14:10	CLEAN	2
2026-07-30 13:14:23	MEDIUM	1
2026-06-18 16:11:54	CLEAN	0