pipewire-crisp-vocals

LOW

maintainer fibsussy 0 votes scanned 2026-09-15 05:18:46.121222

View on AUR

Why flagged

The package installs prebuilt binaries from GitHub releases with unverified checksums (SKIP), but they are from the maintainer's own repository and the worst case is limited to supply-chain risk of malicious binaries; no obfuscated code or remote execution beyond normal AUR build.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs prebuilt binaries from GitHub releases with unverified checksums (SKIP), but they are from the maintainer's own repository and the worst case is limited to supply-chain risk of malicious binaries; no obfuscated code or remote execution beyond normal AUR build.

PKGBUILD

      1# Maintainer: noahlyk <noahlykins@gmail.com>
    
      2pkgname=pipewire-crisp-vocals
    
      3pkgver=0.1.0
    
      4pkgrel=1
    
      5pkgdesc="Hot-reloadable PipeWire mic DSP chain (denoise/gate/compressor/EQ) + declarative auto-wiring into a single virtual mic"
    
      6arch=('x86_64')
    
      7url="https://github.com/noahlyk/pipewire-crisp-vocals"
    
      8license=('MIT')
    
      9depends=('pipewire' 'jack2')
    
      10optdepends=('fluidsynth: optional MIDI-keyboard synth fan-in (synth.enabled in crisp-vocals.ron)')
    
      11makedepends=()
    
      12options=('!debug')
    
      13
    
      14_arch="$CARCH"
    
      15if [ "$_arch" = "x86_64" ]; then
    
      16    _arch="x86_64"
    
      17elif [ "$_arch" = "aarch64" ]; then
    
      18    _arch="aarch64"
    
      19fi
    
      20
    
      21source=(
    
      22    "https://github.com/noahlyk/pipewire-crisp-vocals/releases/download/v${pkgver}/pipewire-crisp-vocals-${pkgver}-${_arch}.tar.gz"
    
      23    "LICENSE::https://raw.githubusercontent.com/noahlyk/pipewire-crisp-vocals/v${pkgver}/LICENSE"
    
      24)
    
      25sha256sums=('SKIP' 'SKIP')
    
      26
    
      27package() {
    
      28    # The release tarball bundles both binaries, the supervisor wrapper
    
      29    # script, the single systemd unit, the PipeWire config drop-ins and the
    
      30    # docs -- see .github/workflows/release.yml's "Create tarball" step.
    
      31    install -Dm755 "$srcdir/crisp-vocals" "$pkgdir/usr/bin/crisp-vocals"
    
      32    install -Dm755 "$srcdir/crisp-links" "$pkgdir/usr/bin/crisp-links"
    
      33
    
      34    install -Dm755 "$srcdir/pipewire-crisp-vocals-wrapper.sh" "$pkgdir/usr/lib/crisp-vocals/pipewire-crisp-vocals-wrapper.sh"
    
      35
    
      36    install -Dm644 "$srcdir/pipewire-crisp-vocals.service" "$pkgdir/usr/lib/systemd/user/pipewire-crisp-vocals.service"
    
      37
    
      38    install -Dm644 "$srcdir/99-crisp-vocals.conf" "$pkgdir/usr/share/pipewire/pipewire.conf.d/99-crisp-vocals.conf"
    
      39    install -Dm644 "$srcdir/99-crisp-vocals-low-latency.conf" "$pkgdir/usr/share/pipewire/pipewire.conf.d/99-crisp-vocals-low-latency.conf"
    
      40
    
      41    install -Dm644 "$srcdir/crisp-vocals.ron.example" "$pkgdir/usr/share/pipewire-crisp-vocals/crisp-vocals.ron.example"
    
      42    install -Dm644 "$srcdir/README.md" "$pkgdir/usr/share/doc/$pkgname/README.md"
    
      43    install -Dm644 "$srcdir/ARCHITECTURE.md" "$pkgdir/usr/share/doc/$pkgname/ARCHITECTURE.md"
    
      44    install -Dm644 "$srcdir/LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      45}
    
      46
    
      47post_install() {
    
      48    echo ""
    
      49    echo "==> pipewire-crisp-vocals installed."
    
      50    echo "    PipeWire config drop-ins were installed to /usr/share/pipewire/pipewire.conf.d/"
    
      51    echo "    -- symlink or copy them into /etc/pipewire/pipewire.conf.d/ (or your user config"
    
      52    echo "    dir) if your PipeWire doesn't already load /usr/share/pipewire/pipewire.conf.d/:"
    
      53    echo ""
    
      54    echo "    mkdir -p ~/.config/pipewire/pipewire.conf.d"
    
      55    echo "    ln -s /usr/share/pipewire/pipewire.conf.d/99-crisp-vocals.conf ~/.config/pipewire/pipewire.conf.d/"
    
      56    echo "    ln -s /usr/share/pipewire/pipewire.conf.d/99-crisp-vocals-low-latency.conf ~/.config/pipewire/pipewire.conf.d/"
    
      57    echo "    systemctl --user restart pipewire pipewire-pulse wireplumber"
    
      58    echo ""
    
      59    echo "==> Then enable the one user service (config + mic auto-detect on first run):"
    
      60    echo "    systemctl --user enable --now pipewire-crisp-vocals.service"
    
      61    echo ""
    
      62    echo "    Edit ~/.config/pipewire/crisp-vocals.ron afterward to tune the DSP chain --"
    
      63    echo "    changes hot-reload within ~50ms, no restart needed. Use 'crisp-links mic'"
    
      64    echo "    to change the routed mic (<node-name> | --auto | --list)."
    
      65}
    
      66
    
      67post_upgrade() {
    
      68    post_install
    
      69}
    
      70

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-15 05:18:46	Low	2