radarr-develop
maintainer txtsd
· 1 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The yarn install runs against the project's own package.json in the official source tarball from GitHub, which is a normal part of building the frontend; no external or untrusted packages are introduced.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The yarn install runs against the project's own package.json in the official source tarball from GitHub, which is a normal part of building the frontend; no external or untrusted packages are introduced.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
npm/yarn/pnpm install of an undeclared external package
npm_install_external
Runs `npm/yarn/pnpm install <package>` for a package not in source=(), pulling unpinned, unreviewed code at build time. Severity downgraded: the package declares/looks like a Node.js consumer, where build-time installs are expected.
-
PKGBUILD:84
yarn install --frozen-lockfile --network-timeout 120000
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: txtsd <aur.archlinux@ihavea.quest>
2
# Maintainer: Donald Webster <fryfrog@gmail.com>
3
# Helpful URL: https://radarr.servarr.com/v1/update/develop?version=0.0.0.0&os=linux&runtime=netcore&arch=x64&includeMajorVersion=true
4
5
pkgname=radarr-develop
6
_pkgname=Radarr
7
pkgver=6.4.0.10523
8
pkgrel=1
9
pkgdesc='Movie organizer/manager for usenet and torrent users (develop branch)'
10
arch=(x86_64 aarch64 armv7h)
11
url='https://radarr.video'
12
license=('GPL-3.0-or-later')
13
groups=(servarr-develop)
14
depends=(
15
aspnet-runtime-8.0
16
gcc-libs
17
glibc
18
sqlite
19
)
20
makedepends=(dotnet-sdk-8.0 yarn)
21
optdepends=(
22
'postgresql: postgresql database'
23
'sabnzbd: usenet downloader'
24
'nzbget: usenet downloader'
25
'qbittorrent: torrent downloader'
26
'deluge: torrent downloader'
27
'rtorrent: torrent downloader'
28
'nodejs-flood: torrent downloader'
29
'vuze: torrent downloader'
30
'aria2: torrent downloader'
31
'transmission-cli: torrent downloader (CLI and daemon)'
32
'transmission-gtk: torrent downloader (GTK+)'
33
'transmission-qt: torrent downloader (Qt)'
34
'jackett: torrent indexer proxy'
35
'nzbhydra2: torznab and usenet indexer proxy'
36
'prowlarr: torrent and usenet indexer proxy'
37
'autobrr: irc, torrent and usenet indexer proxy'
38
)
39
provides=(radarr)
40
conflicts=(radarr)
41
install=radarr.install
42
source=(
43
"${pkgname}-${pkgver}.tar.gz::https://github.com/Radarr/Radarr/archive/refs/tags/v${pkgver}.tar.gz"
44
package_info
45
radarr.service
46
radarr.sysusers
47
radarr.tmpfiles
48
)
49
sha256sums=('69abe366b5297041c3e92a2648ca143d3ffa32f7e92f7a6c10fe2bda5e647851'
50
'4a41a56ab30f8b6001a666e867c7012bfe23760ec29eac957bf90e1dcb4ee36e'
51
'25637c6496aa59673aada6acc6cf41025a5f12a844025ee41d8a6cc66b84b5c0'
52
'bb73e0c55711d7ddbf74140b3beb39cb8674ae92be8387c3dd8109bcd53faca8'
53
'c68efcb3778cb497d7c256dc97df7413ce09f07ea341e4d2683e7fee321cbcbb')
54
55
case ${CARCH} in
56
x86_64) _CARCH='x64' ;;
57
aarch64) _CARCH='arm64' ;;
58
armv7h) _CARCH='arm' ;;
59
esac
60
61
_framework='net8.0'
62
_runtime="linux-${_CARCH}"
63
_output='_output'
64
_artifacts="${_output}/${_framework}/${_runtime}/publish"
65
_branch='develop'
66
67
prepare() {
68
cd "${_pkgname}-${pkgver}"
69
70
# Remove upstream dotnet version
71
rm global.json
72
73
export DOTNET_CLI_TELEMETRY_OPTOUT=1
74
export DOTNET_NOLOGO=1
75
export DOTNET_SKIP_FIRST_TIME_EXPERIENCE=1
76
dotnet new globaljson --sdk-version 8.0.127 --roll-forward latestFeature
77
78
# Prepare backend
79
dotnet restore "src/${_pkgname}.sln" \
80
--runtime "${_runtime}" \
81
--locked-mode
82
83
# Prepare frontend
84
yarn install --frozen-lockfile --network-timeout 120000
85
}
86
87
build() {
88
cd "${_pkgname}-${pkgver}"
89
90
# Build backend
91
export DOTNET_CLI_TELEMETRY_OPTOUT=1
92
export DOTNET_NOLOGO=1
93
export DOTNET_SKIP_FIRST_TIME_EXPERIENCE=1
94
dotnet build "src/${_pkgname}.sln" \
95
--framework "${_framework}" \
96
--runtime "${_runtime}" \
97
--no-self-contained \
98
--no-restore \
99
--configuration Release \
100
-p:Platform=Posix \
101
-p:AssemblyVersion=${pkgver} \
102
-p:AssemblyConfiguration=${_branch} \
103
-p:RuntimeIdentifiers="${_runtime}" \
104
-t:PublishAllRids \
105
&& dotnet build-server shutdown # Build servers do not terminate automatically
106
107
# Build frontend
108
yarn run build --env production
109
}
110
111
package() {
112
cd "${_pkgname}-${pkgver}"
113
114
install -dm755 "${pkgdir}/usr/lib/radarr/bin/UI"
115
116
# Remove Service Helpers, Update, and Windows files
117
rm "${_artifacts}/ServiceInstall"*
118
rm "${_artifacts}/ServiceUninstall"*
119
rm "${_artifacts}/Radarr.Windows."*
120
rm -rf "${_output}/Radarr.Update"
121
122
# Copy backend
123
cp -dr "${_artifacts}/"* "${pkgdir}/usr/lib/radarr/bin"
124
# Copy frontend
125
cp -dr "${_output}/UI/"* "${pkgdir}/usr/lib/radarr/bin/UI"
126
127
# Set executable permissions
128
chmod 755 "${pkgdir}/usr/lib/radarr/bin/ffprobe"
129
130
# License
131
install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}"
132
133
# Disable built in updater.
134
cd "${srcdir}"
135
install -Dm644 package_info "${pkgdir}/usr/lib/radarr"
136
echo "PackageVersion=${pkgver}-${pkgrel}" >> "${pkgdir}/usr/lib/radarr/package_info"
137
138
install -Dm644 radarr.service "${pkgdir}/usr/lib/systemd/system/radarr.service"
139
install -Dm644 radarr.sysusers "${pkgdir}/usr/lib/sysusers.d/radarr.conf"
140
install -Dm644 radarr.tmpfiles "${pkgdir}/usr/lib/tmpfiles.d/radarr.conf"
141
}
142
Changes since previous scan
--- PKGBUILD @ 2026-07-19 00:17+++ PKGBUILD @ 2026-08-03 00:08@@ -4,7 +4,7 @@ pkgname=radarr-develop _pkgname=Radarr-pkgver=6.3.0.10514+pkgver=6.4.0.10523 pkgrel=1 pkgdesc='Movie organizer/manager for usenet and torrent users (develop branch)' arch=(x86_64 aarch64 armv7h)@@ -46,7 +46,7 @@ radarr.sysusers radarr.tmpfiles )-sha256sums=('cb5f3c7c8aa41112bc4ab9fa8d92c7f2ed1f30942545b2275792d853d66e0eba'+sha256sums=('69abe366b5297041c3e92a2648ca143d3ffa32f7e92f7a6c10fe2bda5e647851' '4a41a56ab30f8b6001a666e867c7012bfe23760ec29eac957bf90e1dcb4ee36e' '25637c6496aa59673aada6acc6cf41025a5f12a844025ee41d8a6cc66b84b5c0' 'bb73e0c55711d7ddbf74140b3beb39cb8674ae92be8387c3dd8109bcd53faca8'Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 21:12:02 | MEDIUM | 1 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |