radioshed

LOW

maintainer visorcraft 0 votes scanned 2026-11-06 06:11:22.019786

View on AUR

Why flagged

The package installs a prebuilt AppImage from the project's official GitHub releases, which is a common and acceptable practice for binary packages on the AUR; the source is verifiable, checksummed, and not executed remotely, posing minimal risk despite the low-vote and recent-upload flags.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt AppImage from the project's official GitHub releases, which is a common and acceptable practice for binary packages on the AUR; the source is verifiable, checksummed, and not executed remotely, posing minimal risk despite the low-vote and recent-upload flags.

PKGBUILD

      1# Maintainer: VisorCraft <thomas@visorcraft.com>
    
      2# SPDX-FileCopyrightText: 2026 VisorCraft LLC
    
      3# SPDX-License-Identifier: GPL-3.0-only
    
      4#
    
      5# Binary package. The desktop build is a jlink AppImage, so AUR users
    
      6# install the public GitHub release rather than compiling Compose.
    
      7# Playback still needs host libvlc; the AppImage does not bundle it.
    
      8
    
      9pkgname=radioshed
    
      10pkgver=1.6.1
    
      11pkgrel=1
    
      12pkgdesc="Station-centric player for a local music library"
    
      13arch=(x86_64)
    
      14url="https://www.visorcraft.com/"
    
      15license=(GPL-3.0-only)
    
      16depends=(
    
      17    fuse2
    
      18    hicolor-icon-theme
    
      19    libvlc
    
      20    vlc-plugins-base
    
      21)
    
      22makedepends=(squashfs-tools)
    
      23options=(!strip)
    
      24source=(LICENSE)
    
      25source_x86_64=(
    
      26    "$pkgname-$pkgver.AppImage::https://github.com/visorcraft/RadioShed/releases/download/v$pkgver/RadioShed-$pkgver-x86_64.AppImage"
    
      27)
    
      28sha256sums=('f1099d46419c109bc8ad60dfe24a81c90b4d61f76747c7255fb599dd6f608832')
    
      29sha256sums_x86_64=('f27c849289afb1c972f7855c3a637940d65b8635ba57aedc0f8e64896753ec33')
    
      30
    
      31prepare() {
    
      32    chmod +x "$pkgname-$pkgver.AppImage"
    
      33    # The ELF runtime contains an earlier "hsqs" byte sequence that is not the
    
      34    # appended filesystem. The runtime reports the real squashfs offset.
    
      35    local offset
    
      36    offset="$("./$pkgname-$pkgver.AppImage" --appimage-offset)"
    
      37    if [[ ! "$offset" =~ ^[0-9]+$ ]]; then
    
      38        echo "Could not read the AppImage squashfs offset." >&2
    
      39        return 1
    
      40    fi
    
      41    unsquashfs -q -o "$offset" -d squashfs-root "$pkgname-$pkgver.AppImage"
    
      42}
    
      43
    
      44package() {
    
      45    install -Dm755 "$pkgname-$pkgver.AppImage" "$pkgdir/opt/radioshed/RadioShed.AppImage"
    
      46    install -dm755 "$pkgdir/usr/bin"
    
      47    ln -s /opt/radioshed/RadioShed.AppImage "$pkgdir/usr/bin/radioshed"
    
      48
    
      49    install -Dm644 squashfs-root/radioshed.png \
    
      50        "$pkgdir/usr/share/icons/hicolor/256x256/apps/radioshed.png"
    
      51    sed -e 's|^Exec=.*|Exec=radioshed|' squashfs-root/radioshed.desktop \
    
      52        | install -Dm644 /dev/stdin "$pkgdir/usr/share/applications/radioshed.desktop"
    
      53
    
      54    install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      55}
    
      56

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-06 06:11:22	Low	2