songr-bin

LOW

maintainer roethlar 0 votes scanned 2026-08-22 01:15:41.536472

View on AUR

Why flagged

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: Michael Coelho <mcoelho@gmail.com>
    
      2#
    
      3# D5 in .agents/plans/package-managers.md, RULED 2026-08-08 by the owner
    
      4# directly. This is the first place this repository has ever published a
    
      5# real email address attached to the owner's real name;
    
      6# product/package.json's public author field remains the bare string
    
      7# "roethlar", unaffected.
    
      8#
    
      9# Repackages the upstream .deb, which is what electron-builder produces. Three
    
      10# things about that .deb are load-bearing and were derived from the real
    
      11# artifact rather than assumed:
    
      12#
    
      13#   1. makepkg unpacks a .deb only as far as its ar members, so the payload is
    
      14#      still packed as data.tar.xz when package() runs.
    
      15#   2. It ships NO /usr/bin/songr, so the symlink onto $PATH is created here.
    
      16#   3. chrome-sandbox ships mode 0755. Electron's SUID sandbox helper must be
    
      17#      4755 or the app refuses to start.
    
      18
    
      19pkgname=songr-bin
    
      20pkgver=1.1.4
    
      21pkgrel=1
    
      22pkgdesc="Multi platform controller for your Roon Core. Linux, macOS, Windows, or browser, your library is at your fingertips."
    
      23arch=('x86_64' 'aarch64')
    
      24url="https://github.com/roethlar/songr"
    
      25license=('MIT')
    
      26# Translated from the upstream .deb's own Depends line.
    
      27depends=('gtk3' 'libnotify' 'nss' 'libxss' 'libxtst' 'xdg-utils' 'at-spi2-core'
    
      28         'util-linux-libs' 'libsecret')
    
      29optdepends=('libayatana-appindicator: tray icon on desktops without StatusNotifier')
    
      30provides=('songr')
    
      31conflicts=('songr')
    
      32options=('!strip' '!debug' 'emptydirs')
    
      33source_x86_64=("${pkgname}-${pkgver}-x86_64.deb::${url}/releases/download/v${pkgver}/songr_${pkgver}_amd64.deb")
    
      34source_aarch64=("${pkgname}-${pkgver}-aarch64.deb::${url}/releases/download/v${pkgver}/songr_${pkgver}_arm64.deb")
    
      35sha256sums_x86_64=('70aff4999cbc1b6ae2dc9d76af5bc34d8798cc5c376437483aa7d39c01a02a00')
    
      36sha256sums_aarch64=('ff7d1be19424fa55669586d31762cc0a50a0ca59fd3d250395034252461b4de1')
    
      37
    
      38package() {
    
      39  bsdtar -xpf "${srcdir}/data.tar.xz" -C "${pkgdir}"
    
      40
    
      41  chmod 4755 "${pkgdir}/opt/Songr/chrome-sandbox"
    
      42
    
      43  install -dm755 "${pkgdir}/usr/bin"
    
      44  ln -sf /opt/Songr/songr "${pkgdir}/usr/bin/songr"
    
      45
    
      46  # Electron's own license text is the only LICENSE file inside the payload;
    
      47  # the app's MIT license is not shipped in the .deb, so it is fetched from the
    
      48  # package metadata instead of being invented here.
    
      49  install -Dm644 "${pkgdir}/opt/Songr/LICENSE.electron.txt" \
    
      50    "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE.electron.txt"
    
      51
    
      52  # Debian changelog conventions do not apply to an Arch package.
    
      53  rm -rf "${pkgdir}/usr/share/doc"
    
      54}
    
      55

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-22 01:15:41	Low	1