refract-git

maintainer FabioLolix · 0 votes · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged The package builds from the project's own Git repository, which is normal for AUR packages; the low severity is due to few votes and recent upload, not malicious content.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from the project's own Git repository, which is normal for AUR packages; the low severity is due to few votes and recent upload, not malicious content.

PKGBUILD

      1# Maintainer: Fabio 'Lolix' Loli <fabio.loli@disroot.org> -> https://github.com/FabioLolix
    
      2
    
      3pkgname=refract-git
    
      4pkgver=1.6.0.r0.ga350461
    
      5pkgrel=1
    
      6pkgdesc="Specialized audio CD-ripper optimized for track recovery"
    
      7arch=(x86_64)
    
      8url="https://github.com/Blobfolio/refract"
    
      9license=(WTFPL)
    
      10depends=(
    
      11    glibc
    
      12    libgcc
    
      13    libstdc++
    
      14    )
    
      15makedepends=(
    
      16    git
    
      17    cargo
    
      18    clang
    
      19    yasm
    
      20    cmake # reported makedeps for codecs
    
      21    ninja # reported makedeps for codecs
    
      22    )
    
      23optdepends=(
    
      24    'zenity: for file dialogues'
    
      25	'xdg-desktop-portal-gnome: for file dialogues'
    
      26	'xdg-desktop-portal-gtk: for file dialogues'
    
      27	'xdg-desktop-portal-kde: for file dialogues'
    
      28	)
    
      29provides=(refract)
    
      30conflicts=(refract)
    
      31options=(!lto)
    
      32source=("git+https://github.com/Blobfolio/refract.git")
    
      33sha256sums=('SKIP')
    
      34
    
      35pkgver() {
    
      36  cd refract
    
      37  git describe --long --tags --abbrev=7 | sed 's/^v//;s/\([^-]*-g\)/r\1/;s/-/./g'
    
      38}
    
      39
    
      40prepare() {
    
      41  cd refract
    
      42  cargo fetch --target "$CARCH-unknown-linux-gnu"
    
      43}
    
      44
    
      45build() {
    
      46  cd refract
    
      47  export RUSTUP_TOOLCHAIN=stable
    
      48  export CARGO_TARGET_DIR=target
    
      49
    
      50  cargo build --frozen --release
    
      51}
    
      52
    
      53package() {
    
      54  cd refract
    
      55  install -D target/release/refract -t ${pkgdir}/usr/bin
    
      56  install -D release/man/*.1 -t "${pkgdir}"/usr/share/man/man1/
    
      57  #install -D release/completions/refract.bash -t "${pkgdir}"/usr/share/bash-completion/completions/
    
      58
    
      59  # todo install completions
    
      60}
    
      61

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	2
2026-08-17 00:18:29	LOW	2
2026-08-16 00:03:42	LOW	2
2026-08-15 00:26:13	LOW	2
2026-08-14 23:30:04	LOW	2