qbzd

LOW

maintainer blitzfc 0 votes scanned 2026-09-08 07:16:32.151301

View on AUR

Why flagged

The package builds from source hosted on the project's own GitHub repository, uses vendored Rust dependencies with offline build, and installs only its own compiled binary and associated data; the skipped checksums are a quality issue but do not imply malicious intent given the context.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package builds from source hosted on the project's own GitHub repository, uses vendored Rust dependencies with offline build, and installs only its own compiled binary and associated data; the skipped checksums are a quality issue but do not imply malicious intent given the context.

PKGBUILD

      1# Maintainer: blitzkriegfc <blitzkriegfc@gmail.com>
    
      2pkgname=qbzd
    
      3pkgver=2.1.0
    
      4pkgrel=1
    
      5pkgdesc="QBZ headless Qobuz daemon for servers and appliances"
    
      6arch=('x86_64' 'aarch64')
    
      7url="https://github.com/vicrodh/qbz"
    
      8license=('MIT')
    
      9depends=('alsa-lib')
    
      10makedepends=('rust' 'cmake' 'nasm' 'jack2')
    
      11# makepkg's GCC LTO objects cannot be consumed from Rust rlibs by rustc's lld.
    
      12options=('!lto' '!debug')
    
      13install=qbzd.install
    
      14optdepends=(
    
      15    'pipewire: PipeWire device discovery and sample-rate control'
    
      16    'libpulse: PulseAudio device discovery and routing through pactl'
    
      17    'jack2: JACK audio backend'
    
      18    'xdg-utils: Open the login URL in a browser when one is available'
    
      19)
    
      20provides=('qbzd')
    
      21conflicts=('qbzd-bin' 'qbzd-git')
    
      22source=(
    
      23    "qbz-${pkgver}.tar.gz::https://github.com/vicrodh/qbz/archive/refs/tags/v${pkgver}.tar.gz"
    
      24    "qbz-${pkgver}-cargo-vendor.tar.xz::https://github.com/vicrodh/qbz/releases/download/v${pkgver}/qbz-${pkgver}-cargo-vendor.tar.xz"
    
      25)
    
      26sha256sums=('SKIP' 'SKIP')
    
      27
    
      28prepare() {
    
      29    cd "${srcdir}/qbz-${pkgver}"
    
      30    mkdir -p .cargo
    
      31    printf '%s\n' \
    
      32        '[source.crates-io]' \
    
      33        'replace-with = "vendored-sources"' \
    
      34        '' \
    
      35        '[source.vendored-sources]' \
    
      36        "directory = \"${srcdir}/qbz-${pkgver}-cargo-vendor\"" \
    
      37        '' \
    
      38        '[net]' \
    
      39        'offline = true' > .cargo/config.toml
    
      40}
    
      41
    
      42build() {
    
      43    cd "${srcdir}/qbz-${pkgver}"
    
      44    cargo build --release --locked --offline \
    
      45        --manifest-path crates/Cargo.toml -p qbzd
    
      46}
    
      47
    
      48package() {
    
      49    cd "${srcdir}/qbz-${pkgver}"
    
      50    local binary=crates/target/release/qbzd
    
      51
    
      52    install -Dm755 "$binary" "${pkgdir}/usr/bin/qbzd"
    
      53    install -Dm644 crates/qbzd/service/qbzd.service \
    
      54        "${pkgdir}/usr/lib/systemd/user/qbzd.service"
    
      55
    
      56    "$binary" completions bash > "${srcdir}/qbzd.bash"
    
      57    "$binary" completions zsh > "${srcdir}/qbzd.zsh"
    
      58    "$binary" completions fish > "${srcdir}/qbzd.fish"
    
      59    install -Dm644 "${srcdir}/qbzd.bash" "${pkgdir}/usr/share/bash-completion/completions/qbzd"
    
      60    install -Dm644 "${srcdir}/qbzd.zsh" "${pkgdir}/usr/share/zsh/site-functions/_qbzd"
    
      61    install -Dm644 "${srcdir}/qbzd.fish" "${pkgdir}/usr/share/fish/vendor_completions.d/qbzd.fish"
    
      62    install -Dm644 packaging/linux/qbzd-standalone-README.md \
    
      63        "${pkgdir}/usr/share/doc/${pkgname}/README.md"
    
      64    install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      65    install -Dm644 licenses/* -t "${pkgdir}/usr/share/licenses/${pkgname}/third-party"
    
      66}
    
      67

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-08 07:16:32	Low	2