rox-player-bin

LOW

maintainer simonweiss 0 votes scanned 2026-10-18 01:20:44.235951

View on AUR

Why flagged

The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal practice for AUR binary packages; the low severity is due to the lack of source build and recent upload with few votes, but the source is verifiable and from an official project host.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal practice for AUR binary packages; the low severity is due to the lack of source build and recent upload with few votes, but the source is verifiable and from an official project host.

PKGBUILD

      1# Maintainer: Simon Weiss <wonder@simonweiss.space>
    
      2
    
      3pkgname=rox-player-bin
    
      4_pkgname=rox
    
      5pkgver=1.31.0
    
      6pkgrel=1
    
      7pkgdesc="Fast, composable music player written in rust (foobar2000 for the current year) (prebuilt binary)"
    
      8arch=('x86_64')
    
      9url="https://github.com/zealsprince/rox"
    
      10license=('AGPL-3.0-only')
    
      11# libvulkan, libwayland-client and libX11 are loaded with dlopen, so they
    
      12# do not show in the ELF NEEDED list. SQLite is bundled in the binary.
    
      13depends=(
    
      14  'alsa-lib'
    
      15  'glibc'
    
      16  'hicolor-icon-theme'
    
      17  'libgcc'
    
      18  'libstdc++'
    
      19  'libx11'
    
      20  'libxcb'
    
      21  'libxkbcommon'
    
      22  'libxkbcommon-x11'
    
      23  'vulkan-icd-loader'
    
      24  'wayland'
    
      25)
    
      26optdepends=(
    
      27  'vulkan-intel: Vulkan support for Intel graphics'
    
      28  'vulkan-radeon: Vulkan support for AMD graphics'
    
      29  'nvidia-utils: Vulkan support for Nvidia graphics'
    
      30  'libglvnd: OpenGL/EGL for the Milkdrop visualizer'
    
      31  'noto-fonts-cjk: fast drawing of Japanese, Chinese and Korean text'
    
      32)
    
      33provides=("rox-player=$pkgver" 'rox')
    
      34conflicts=('rox-player' 'rox-player-git')
    
      35options=('!strip' '!debug')
    
      36source=("$pkgname-$pkgver.tar.gz::$url/releases/download/v$pkgver/$_pkgname-v$pkgver-linux-x86_64.tar.gz")
    
      37sha256sums=('8cc50603ba7da44592f970e69bc8eb7db1a9cbddf5d76c3e6f0df3c51c58e2e0')
    
      38
    
      39package() {
    
      40  cd "$_pkgname-v$pkgver-linux-x86_64"
    
      41
    
      42  install -Dm755 rox "$pkgdir/usr/bin/rox"
    
      43  install -Dm755 rox-mcp "$pkgdir/usr/bin/rox-mcp"
    
      44
    
      45  install -Dm644 rox.desktop "$pkgdir/usr/share/applications/rox.desktop"
    
      46  install -Dm644 rox.svg "$pkgdir/usr/share/icons/hicolor/scalable/apps/rox.svg"
    
      47  install -Dm644 rox.png "$pkgdir/usr/share/pixmaps/rox.png"
    
      48  install -Dm644 rox.metainfo.xml "$pkgdir/usr/share/metainfo/rox.metainfo.xml"
    
      49
    
      50  install -Dm644 README.txt "$pkgdir/usr/share/doc/$pkgname/README.txt"
    
      51  install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      52}
    
      53

Changes since previous scan

--- PKGBUILD @ 2026-10-11 00:26
+++ PKGBUILD @ 2026-10-18 01:20
@@ -2,7 +2,7 @@
 
 pkgname=rox-player-bin
 _pkgname=rox
-pkgver=1.30.13
+pkgver=1.31.0
 pkgrel=1
 pkgdesc="Fast, composable music player written in rust (foobar2000 for the current year) (prebuilt binary)"
 arch=('x86_64')
@@ -34,7 +34,7 @@
 conflicts=('rox-player' 'rox-player-git')
 options=('!strip' '!debug')
 source=("$pkgname-$pkgver.tar.gz::$url/releases/download/v$pkgver/$_pkgname-v$pkgver-linux-x86_64.tar.gz")
-sha256sums=('16b1ef86f8b12b1cc27acf9e49046132855998ec2c44b9ca65ec50dc3839859b')
+sha256sums=('8cc50603ba7da44592f970e69bc8eb7db1a9cbddf5d76c3e6f0df3c51c58e2e0')
 
 package() {
   cd "$_pkgname-v$pkgver-linux-x86_64"

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-18 01:20:44	Low	2
2026-10-11 00:26:05	Clean	2
2026-10-10 22:16:18	Low	1