qqm-bin

LOW
maintainer jinzhongjia 0 votes scanned 2026-10-07 16:05:57.670383
View on AUR
Why flagged

The package installs a prebuilt binary from the project's own GitHub releases, which is normal for AUR packages; the low severity is due to few votes and recent upload, not inherent risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's own GitHub releases, which is normal for AUR packages; the low severity is due to few votes and recent upload, not inherent risk.

PKGBUILD

1# Maintainer: jinzhongjia <mail@nvimer.org>
2
3pkgname=qqm-bin
4_pkgname=qqm
5pkgver=0.0.1
6pkgrel=1
7pkgdesc="go-musicfox style QQ Music terminal player with background daemon and MPRIS support (prebuilt binary)"
8arch=('x86_64' 'aarch64')
9url="https://github.com/jinzhongjia/QQMusicApi-rs"
10license=('GPL-3.0-only')
11depends=('glibc' 'gcc-libs' 'alsa-lib')
12provides=("${_pkgname}=${pkgver}")
13conflicts=("${_pkgname}")
14options=('!strip' '!debug')
15source_x86_64=("${url}/releases/download/v${pkgver}/${_pkgname}-v${pkgver}-x86_64-unknown-linux-gnu.tar.gz")
16source_aarch64=("${url}/releases/download/v${pkgver}/${_pkgname}-v${pkgver}-aarch64-unknown-linux-gnu.tar.gz")
17sha256sums_x86_64=('8b8cad23199a7f2ba54043437de97c90f1f3b46cce2b0c0520c3d5190e8d49b4')
18sha256sums_aarch64=('3df260b8d7db60b197d2d58ca627c626c46b3de8eeaff31446f9850836c882d4')
19
20package() {
21 cd "${_pkgname}-v${pkgver}-${CARCH}-unknown-linux-gnu"
22
23 install -Dm755 qqm "${pkgdir}/usr/bin/qqm"
24 install -Dm644 README.md "${pkgdir}/usr/share/doc/${pkgname}/README.md"
25 install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
26}
27

Scan history

Scanned at (UTC)SeverityRules
2026-10-07 16:05:57 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion