rox-player-git
maintainer Trixelit
· 1 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The package builds from source hosted on GitHub (plausibly the project's own), uses standard Rust build practices, and installs only binaries and data files; the low severity is due to few votes and recent upload, not malicious content.
Triggered rules
LOW
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
LOW
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from source hosted on GitHub (plausibly the project's own), uses standard Rust build practices, and installs only binaries and data files; the low severity is due to few votes and recent upload, not malicious content.
PKGBUILD
1
# Maintainer: Juniper <trixelit.alias@gmail.com>
2
3
pkgname=rox-player-git
4
pkgver=1.7.0.r0.g8454cf9
5
pkgrel=1
6
pkgdesc="Fast, composable music player written in rust (foobar2000 for the current year)"
7
arch=('x86_64')
8
url="https://github.com/zealsprince/rox"
9
license=('AGPL-3.0-only')
10
depends=(
11
'alsa-lib'
12
'glibc'
13
'gcc-libs'
14
'sqlite'
15
'libxcb'
16
'libxkbcommon'
17
'libxkbcommon-x11'
18
'vulkan-icd-loader'
19
)
20
makedepends=('cargo' 'patch' 'curl' 'gcc' 'clang' 'git')
21
optdepends=(
22
'vulkan-intel: Vulkan support for Intel graphics'
23
'vulkan-radeon: Vulkan support for AMD graphics'
24
'nvidia-utils: Vulkan support for Nvidia graphics'
25
)
26
provides=('rox' 'rox-player')
27
conflicts=('rox-player')
28
source=("rox::git+$url.git")
29
sha256sums=('SKIP')
30
31
pkgver() {
32
cd "rox"
33
git describe --long --tags 2>/dev/null | sed 's/^v//;s/\([^-]*-g\)/r\1/;s/-/./g' || printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
34
}
35
36
prepare() {
37
cd "rox"
38
39
# Fetch and patch the GPUI crates for rox
40
chmod +x scripts/vendor-gpui.sh
41
./scripts/vendor-gpui.sh
42
43
# Download rust deps
44
export CARGO_HOME="$srcdir/cargo-home"
45
cargo fetch --locked --target "$CARCH-unknown-linux-gnu"
46
}
47
48
build() {
49
cd "rox"
50
export CARGO_HOME="$srcdir/cargo-home"
51
52
# Tell ring and sqlite3-sys to link against system libraries / build C code correctly
53
export LIBSQLITE3_SYS_USE_PKG_CONFIG=1
54
55
# Fix ring's C/Assembly compilation
56
export CC=gcc
57
export CFLAGS="-O2 -fPIC"
58
export RING_PREGEN_PREFIX=1
59
60
export RUSTFLAGS="--remap-path-prefix=$srcdir=/"
61
62
cargo build --frozen --release --all-targets
63
}
64
65
package() {
66
cd "rox"
67
68
# Install binary
69
install -Dm755 "target/release/rox" "$pkgdir/usr/bin/rox"
70
71
# Install Licence
72
if [ -f "LICENSE" ]; then
73
install -Dm644 "LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
74
fi
75
76
# Desktop entry & app icon
77
install -Dm644 "crates/rox/assets/app/rox.desktop" "$pkgdir/usr/share/applications/rox.desktop"
78
79
install -Dm644 "crates/rox/assets/app/rox.png" "$pkgdir/usr/share/pixmaps/rox.png"
80
}
81
Changes since previous scan
--- PKGBUILD @ 2026-08-01 00:11+++ PKGBUILD @ 2026-08-03 00:08@@ -1,7 +1,7 @@ # Maintainer: Juniper <trixelit.alias@gmail.com> pkgname=rox-player-git-pkgver=1.4.1.r1.g18007c1+pkgver=1.7.0.r0.g8454cf9 pkgrel=1 pkgdesc="Fast, composable music player written in rust (foobar2000 for the current year)" arch=('x86_64')Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 09:20:18 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 03:13:55 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 09:32:02 | LOW | 2 |
| 2026-07-26 03:31:41 | LOW | 2 |