refryt-bin

LOW

maintainer 9M2PJU 0 votes scanned 2026-10-18 17:22:42.773931

View on AUR

Why flagged

The package installs a prebuilt AppImage from the project's official GitHub releases, which is extracted and repackaged; the source is verifiable and checksummed, and no untrusted remote code execution occurs during build or install.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt AppImage from the project's official GitHub releases, which is extracted and repackaged; the source is verifiable and checksummed, and no untrusted remote code execution occurs during build or install.

PKGBUILD

      1# Maintainer: 9M2PJU <9m2pju@gmail.com>
    
      2pkgname=refryt-bin
    
      3pkgver=0.1.10
    
      4pkgrel=1
    
      5pkgdesc='A fast, native YouTube Music client (prebuilt upstream AppImage)'
    
      6arch=('x86_64')
    
      7url='https://github.com/gridoe/refryt'
    
      8license=('GPL-3.0-or-later')
    
      9depends=('gcc-libs' 'glibc' 'hicolor-icon-theme' 'webkit2gtk-4.1' 'yt-dlp')
    
      10provides=('refryt')
    
      11conflicts=('refryt')
    
      12source=("refryt-${pkgver}-x86_64.AppImage::https://github.com/gridoe/refryt/releases/download/v${pkgver}/refryt-${pkgver}-x86_64.AppImage"
    
      13        "LICENSE-${pkgver}::https://raw.githubusercontent.com/gridoe/refryt/v${pkgver}/LICENSE")
    
      14sha256sums=('70253012ff60aa6f3f299282a401f02fcedc8eedd447009a4e9766a1ad187933'
    
      15            '3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986')
    
      16
    
      17prepare() {
    
      18  chmod +x "refryt-${pkgver}-x86_64.AppImage"
    
      19  ./"refryt-${pkgver}-x86_64.AppImage" --appimage-extract > /dev/null
    
      20}
    
      21
    
      22package() {
    
      23  # Upstream binary has RUNPATH $ORIGIN/../lib, so keep bin/ + lib/ siblings.
    
      24  install -dm755 "${pkgdir}/opt/refryt/bin" "${pkgdir}/opt/refryt/lib"
    
      25  install -m755 squashfs-root/usr/bin/refryt "${pkgdir}/opt/refryt/bin/refryt"
    
      26  cp -a squashfs-root/usr/lib/. "${pkgdir}/opt/refryt/lib/"
    
      27  # Use the distro yt-dlp (in depends) instead of the bundled copy.
    
      28  install -dm755 "${pkgdir}/usr/bin"
    
      29  ln -s /opt/refryt/bin/refryt "${pkgdir}/usr/bin/refryt"
    
      30
    
      31  install -Dm644 squashfs-root/usr/share/applications/refryt.desktop \
    
      32    "${pkgdir}/usr/share/applications/refryt.desktop"
    
      33  for s in 16 32 48 64 128 256 512; do
    
      34    install -Dm644 "squashfs-root/usr/share/icons/hicolor/${s}x${s}/apps/refryt.png" \
    
      35      "${pkgdir}/usr/share/icons/hicolor/${s}x${s}/apps/refryt.png"
    
      36  done
    
      37  install -Dm644 "LICENSE-${pkgver}" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      38}
    
      39

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-18 17:22:42	Low	2