opentubex-nightly-bin

LOW

maintainer D3SOX 1 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package downloads prebuilt .deb binaries from the project's official GitHub releases, which is a normal AUR pattern for -bin packages; the source is verifiable and checksummed, posing minimal risk despite the 'nightly' channel and low votes.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads prebuilt .deb binaries from the project's official GitHub releases, which is a normal AUR pattern for -bin packages; the source is verifiable and checksummed, posing minimal risk despite the 'nightly' channel and low votes.

PKGBUILD

      1# Maintainer: Nico <d3sox at protonmail dot com>
    
      2
    
      3_pkgname=opentubex
    
      4_ghurl='https://github.com/OpenTubeX/OpenTubeX'
    
      5pkgname=${_pkgname}-nightly-bin
    
      6pkgver=0.36.1
    
      7pkgrel=1
    
      8# The old .nightly. versions sort after stable versions of the same release.
    
      9epoch=1
    
      10if [[ "$pkgver" == *nightly.* ]]; then
    
      11    _tag="v${pkgver/nightly./-nightly-}"
    
      12    _asset_version=${_tag#v}
    
      13else
    
      14    _tag="v${pkgver}-beta"
    
      15    _asset_version="${pkgver}_beta"
    
      16fi
    
      17pkgdesc='A private desktop YouTube client, nightly channel'
    
      18arch=('x86_64' 'aarch64')
    
      19url='https://opentubex.org'
    
      20license=('AGPL3')
    
      21options=('!strip' 'staticlibs')
    
      22depends=('ttf-liberation')
    
      23optdepends=('ffmpeg: Use the system FFmpeg when installed before first launch; configurable later in Settings'
    
      24            'yt-dlp: Use the system yt-dlp when installed before first launch; configurable later in Settings')
    
      25provides=("${_pkgname}")
    
      26conflicts=("${_pkgname}")
    
      27
    
      28source_x86_64=("${pkgname}-${pkgver}-amd64.deb"::"$_ghurl/releases/download/${_tag}/${_pkgname}_${_asset_version}_amd64.deb")
    
      29source_aarch64=("${pkgname}-${pkgver}-arm64.deb"::"$_ghurl/releases/download/${_tag}/${_pkgname}_${_asset_version}_arm64.deb")
    
      30
    
      31prepare() {
    
      32    mkdir -p data
    
      33    bsdtar -x -f data.tar.xz -C data
    
      34}
    
      35
    
      36package() {
    
      37    install -d "$pkgdir/usr/bin"
    
      38    cp -a "$srcdir/data/." "$pkgdir/"
    
      39    ln -s "/opt/OpenTubeX/$_pkgname" "$pkgdir/usr/bin/$_pkgname"
    
      40}
    
      41
    
      42sha256sums_x86_64=('a2bfd4938c3761402f3dd36224cdb4191110107059a2f88c4cfede8c3cfda686')
    
      43sha256sums_aarch64=('612605a6bba726b522ffa19ebb702b1f4ad2c846c0c44b06643c50e13434d658')
    
      44

Changes since previous scan

--- PKGBUILD @ 2026-10-16 00:12
+++ PKGBUILD @ 2026-10-17 00:21
@@ -3,10 +3,18 @@
 _pkgname=opentubex
 _ghurl='https://github.com/OpenTubeX/OpenTubeX'
 pkgname=${_pkgname}-nightly-bin
-pkgver=0.36.0.nightly.2111
+pkgver=0.36.1
 pkgrel=1
-_version=${pkgver//.nightly./-nightly-}
-pkgdesc='A private desktop YouTube client, nightly build'
+# The old .nightly. versions sort after stable versions of the same release.
+epoch=1
+if [[ "$pkgver" == *nightly.* ]]; then
+    _tag="v${pkgver/nightly./-nightly-}"
+    _asset_version=${_tag#v}
+else
+    _tag="v${pkgver}-beta"
+    _asset_version="${pkgver}_beta"
+fi
+pkgdesc='A private desktop YouTube client, nightly channel'
 arch=('x86_64' 'aarch64')
 url='https://opentubex.org'
 license=('AGPL3')
@@ -17,8 +25,8 @@
 provides=("${_pkgname}")
 conflicts=("${_pkgname}")
 
-source_x86_64=("${pkgname}-${pkgver}-amd64.deb"::"$_ghurl/releases/download/v${_version}/${_pkgname}_${_version}_amd64.deb")
-source_aarch64=("${pkgname}-${pkgver}-arm64.deb"::"$_ghurl/releases/download/v${_version}/${_pkgname}_${_version}_arm64.deb")
+source_x86_64=("${pkgname}-${pkgver}-amd64.deb"::"$_ghurl/releases/download/${_tag}/${_pkgname}_${_asset_version}_amd64.deb")
+source_aarch64=("${pkgname}-${pkgver}-arm64.deb"::"$_ghurl/releases/download/${_tag}/${_pkgname}_${_asset_version}_arm64.deb")
 
 prepare() {
     mkdir -p data
@@ -31,6 +39,6 @@
     ln -s "/opt/OpenTubeX/$_pkgname" "$pkgdir/usr/bin/$_pkgname"
 }
 
-sha256sums_x86_64=('2e04f3f16d12fa8c3865b4a8119a159fd7ce24987249eb259935be2f65ecdfb3')
-sha256sums_aarch64=('9afbf0bb73eb1703b1036583f0c73c5a1c44f90fdc717f93154bc1e067bcc330')
+sha256sums_x86_64=('a2bfd4938c3761402f3dd36224cdb4191110107059a2f88c4cfede8c3cfda686')
+sha256sums_aarch64=('612605a6bba726b522ffa19ebb702b1f4ad2c846c0c44b06643c50e13434d658')
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 03:14:05	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 15:12:23	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 15:20:15	Low	2