solco-bin

LOW

maintainer crmne 0 votes scanned 2026-10-28 15:50:30.098556

View on AUR

Why flagged

The package installs a prebuilt Debian binary from a GitHub release, which is a legitimate but unverifiable source; however, it is not executed at build time and the checksums are provided, reducing risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt Debian binary from a GitHub release, which is a legitimate but unverifiable source; however, it is not executed at build time and the checksums are provided, reducing risk.

PKGBUILD

      1# Maintainer: Carmine Paolino <carmine@paolino.me>
    
      2#
    
      3# Generated for each Solco release by crmne/solco-releases
    
      4# (packaging/aur/solco-bin/PKGBUILD.erb). Changes belong there.
    
      5#
    
      6# Solco is proprietary: this installs the official Debian package's files
    
      7# unchanged. It needs a licence key from https://getsolco.com.
    
      8
    
      9pkgname=solco-bin
    
      10_tag=v1.0.0-alpha.1
    
      11pkgver=1.0.0alpha.1
    
      12pkgrel=1
    
      13pkgdesc='Prep studio for DJs: grids, keys, tags, smart playlists and USB exports for CDJs (private beta, needs a licence key)'
    
      14arch=('x86_64' 'aarch64')
    
      15url='https://getsolco.com'
    
      16license=('LicenseRef-Solco')
    
      17depends=(
    
      18  'alsa-lib'
    
      19  'dbus'
    
      20  'gcc-libs'
    
      21  'glibc'
    
      22  'hicolor-icon-theme'
    
      23  'libglvnd'
    
      24  'libpipewire'
    
      25  'libx11'
    
      26  'libxcursor'
    
      27  'libxi'
    
      28  'libxkbcommon'
    
      29  'libxkbcommon-x11'
    
      30  'openssl'
    
      31  'vulkan-icd-loader'
    
      32  'wayland'
    
      33)
    
      34optdepends=(
    
      35  'vulkan-driver: analyse on the graphics card'
    
      36  'xdg-desktop-portal: file and folder pickers'
    
      37  'zenity: file and folder pickers without a desktop portal'
    
      38  'polkit: password prompt for making a USB drive write quickly'
    
      39)
    
      40provides=('solco')
    
      41conflicts=('solco')
    
      42options=('!debug' '!strip')
    
      43source_x86_64=("solco-${_tag}-amd64.deb::https://github.com/crmne/solco-releases/releases/download/${_tag}/solco_1.0.0.alpha.1_amd64.deb")
    
      44source_aarch64=("solco-${_tag}-arm64.deb::https://github.com/crmne/solco-releases/releases/download/${_tag}/solco_1.0.0.alpha.1_arm64.deb")
    
      45sha256sums_x86_64=('ed1ccc58e4da0c8edc3a2752efb059da2da2ab4944b6235a085de8e12ee69f4c')
    
      46sha256sums_aarch64=('ac232f232cffe8540c1490c22d76f2fffab93fbbdb031916e9f64087e9b05676')
    
      47
    
      48package() {
    
      49  bsdtar -xf data.tar.* -C "${pkgdir}"
    
      50  # Arch keeps a package's licence under its own name.
    
      51  mv "${pkgdir}/usr/share/licenses/solco" "${pkgdir}/usr/share/licenses/${pkgname}"
    
      52}
    
      53

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-28 15:50:30	Low	2