open-orpheus-bin

maintainer Misaka19465 · 0 votes · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged The package installs a prebuilt binary from the project's official GitHub releases, which is a normal practice for AUR binary packages; the source is verifiable and checksummed, posing no active threat.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's official GitHub releases, which is a normal practice for AUR binary packages; the source is verifiable and checksummed, posing no active threat.

PKGBUILD

      1# Maintainer: Misaka 19465 <19465@misakanet.team>
    
      2# Thanks to the original maintainer zlicdt <xkicdt1@gmail.com>.
    
      3
    
      4pkgname=open-orpheus-bin
    
      5pkgver=0.16.2
    
      6pkgrel=1
    
      7_upstream_pkgname=open-orpheus
    
      8pkgdesc="An open-source implementation of Netease Cloud Music's Orpheus browser host."
    
      9arch=('x86_64')
    
      10url="https://github.com/YUCLing/open-orpheus"
    
      11license=('MIT')
    
      12depends=(
    
      13    'gtk3'
    
      14    'libnotify'
    
      15    'nss'
    
      16    'xdg-utils'
    
      17    'at-spi2-core'
    
      18    'libdrm'
    
      19    'mesa'
    
      20    'libxcb'
    
      21)
    
      22optdepends=('kde-cli-tools')
    
      23makedepends=('libarchive')
    
      24provides=("${_upstream_pkgname}=${pkgver}")
    
      25conflicts=("${_upstream_pkgname}")
    
      26source=(
    
      27    "${_upstream_pkgname}_${pkgver}_amd64.deb::https://github.com/YUCLing/open-orpheus/releases/download/v${pkgver}/${_upstream_pkgname}_${pkgver}_amd64.deb"
    
      28    "LICENSE"
    
      29)
    
      30sha256sums=(
    
      31    'd91aa12916a86da1f6fa0d2f0a2c4a219c7dc9463591493b3d6c30a473fa15dd'
    
      32    '4499595d653b7a9e65001bb09239e6fb5d33e650d1f9db808ce87905021e9ff8'
    
      33)
    
      34
    
      35prepare() {
    
      36    ar x "${srcdir}/${_upstream_pkgname}_${pkgver}_amd64.deb"
    
      37}
    
      38
    
      39package() {
    
      40    bsdtar -xf "${srcdir}/data.tar.zst" -C "${pkgdir}" --no-same-owner
    
      41    install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      42}
    
      43

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	2
2026-08-17 13:36:23	LOW	2