orangplayer-bin

LOW

maintainer Vakarux 0 votes scanned 2026-10-06 00:13:36.889724

View on AUR

Why flagged

The package downloads a prebuilt binary from the project's official GitHub release page, which is a common and generally safe practice; the low severity is due to the lack of source build and limited AUR votes, not malicious indicators.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from the project's official GitHub release page, which is a common and generally safe practice; the low severity is due to the lack of source build and limited AUR votes, not malicious indicators.

PKGBUILD

      1pkgname=orangplayer-bin
    
      2pkgver=0.1.1
    
      3pkgrel=2
    
      4pkgdesc="Media player for your files, YouTube, YT Music, SoundCloud and Spotify, with lyrics, downloads and skins"
    
      5arch=('x86_64')
    
      6url="https://github.com/Orang-Studio/OrangPlayer"
    
      7license=('GPL-3.0-or-later')
    
      8depends=('qt6-base' 'qt6-declarative' 'qt6-svg' 'taglib' 'ffmpeg>=2:9' 'ffmpeg<2:10' 'yt-dlp' 'libplacebo' 'libass' 'luajit' 'lcms2'
    
      9         'uchardet' 'zimg' 'libpulse' 'libpipewire' 'alsa-lib' 'sndio' 'libva' 'libvdpau' 'libdrm' 'libdisplay-info'
    
      10         'mesa' 'libglvnd' 'vulkan-icd-loader' 'wayland' 'libxkbcommon' 'libx11' 'libxext' 'libxfixes' 'libxpresent'
    
      11         'libxrandr' 'libxss' 'libxv' 'libjpeg-turbo' 'zlib' 'openssl' 'hicolor-icon-theme')
    
      12optdepends=('noto-fonts-cjk: Chinese, Japanese and Korean lyrics and titles'
    
      13            'cava: visualizer bars'
    
      14            'discord: Rich Presence')
    
      15provides=('orangplayer')
    
      16conflicts=('orangplayer' 'orang-player')
    
      17options=('!strip' '!debug')
    
      18source=("$url/releases/download/v$pkgver/orangplayer-$pkgver-x86_64.tar.zst")
    
      19sha256sums=('07c844755c37f2c66f75c07000139d6e82328f42875bec5e138f82f85eb2d59a')
    
      20
    
      21package() {
    
      22    cp -a usr "$pkgdir/"
    
      23}
    
      24

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-06 00:13:36	Low	2
2026-10-05 23:40:58	Low	2