soto-player-community-bin

maintainer wkk-dev · 0 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package installs a prebuilt AppImage from the project's official GitHub repository, which is a normal practice for AUR binary packages; the source is verifiable, and no malicious behavior is present in the PKGBUILD.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt AppImage from the project's official GitHub repository, which is a normal practice for AUR binary packages; the source is verifiable, and no malicious behavior is present in the PKGBUILD.

PKGBUILD

1# Maintainer: wkk-dev <wkk-dev@qq.com>
2
3# === 包基本信息 ===
4pkgname=soto-player-community-bin
5pkgver=2.3.8
6pkgrel=23804
7pkgdesc="非官方 - Soto Player-Community - 现代化跨平台桌面音乐播放器,支持丰富的歌词显示"
8arch=('x86_64')
9url="https://github.com/Krits03/Soto-Player-Community"
10license=('AGPL-3.0')
11
12# === 依赖 ===
13depends=('libappindicator-gtk3'
14 'libxss'
15 'libxtst'
16 'libnotify')
17optdepends=('pipewire: 音频后端'
18 'pulseaudio: 音频后端')
19
20# === 源文件 ===
21_github="https://github.com/Krits03/Soto-Player-Community"
22_appimage="soto-player-community-${pkgver}-x86_64.AppImage"
23_icon="soto-player-community.png"
24
25source=("${_appimage}::${_github}/releases/download/v${pkgver}/${_appimage}"
26 "${_icon}::${_github}/raw/v${pkgver}/public/icons/favicon.png")
27sha256sums=('6a43fb22dc3f79e9f98dc39963e1fbc27dcc2009c47f444fd73a5b1e44d89581'
28 'f3f4f3f17b9ced4d6258f5ece1f76693f33ee7d5d2629efb56e4a6e071b1cd83')
29
30# === 打包 ===
31package() {
32 # 提取 AppImage(避免运行时 FUSE 挂载问题)
33 chmod +x "${srcdir}/${_appimage}"
34 cd "${srcdir}"
35 ./"${_appimage}" --appimage-extract > /dev/null 2>&1
36
37 # 安装可执行文件
38 install -Dm755 "${srcdir}/squashfs-root/AppRun" \
39 "${pkgdir}/usr/bin/soto-player-community"
40
41 # 安装资源文件
42 cp -r "${srcdir}/squashfs-root/usr/"* "${pkgdir}/usr/" 2>/dev/null || true
43 cp -r "${srcdir}/squashfs-root/etc/"* "${pkgdir}/etc/" 2>/dev/null || true
44
45 # 移除与系统包冲突的捆绑库文件
46 rm -f "${pkgdir}/usr/lib/libXss.so"* \
47 "${pkgdir}/usr/lib/libXtst.so"* \
48 "${pkgdir}/usr/lib/libnotify.so"*
49
50 # 桌面文件(修正本地化语法)
51 install -dm755 "${pkgdir}/usr/share/applications"
52 cat > "${pkgdir}/usr/share/applications/soto-player-community.desktop" << 'DESKEOF'
53[Desktop Entry]
54Name=Soto Player-社区非官方版
55GenericName=Music Player
56Comment=跨平台桌面音乐播放器,支持丰富的歌词显示
57Exec=soto-player-community
58Icon=soto-player-community
59Terminal=false
60Type=Application
61Categories=Audio;Music;Player;
62StartupWMClass=soto-player-community
63MimeType=audio/mpeg;audio/flac;audio/wav;audio/ogg;audio/aac;
64DESKEOF
65
66 # 图标
67 find "${srcdir}/squashfs-root" -name "*.png" -path "*/icons/*" | head -1 | xargs -I{} install -Dm644 {} \
68 "${pkgdir}/usr/share/pixmaps/soto-player-community.png" 2>/dev/null || \
69 install -Dm644 "${srcdir}/${_icon}" \
70 "${pkgdir}/usr/share/pixmaps/soto-player-community.png"
71 install -Dm644 "${srcdir}/${_icon}" \
72 "${pkgdir}/usr/share/icons/hicolor/120x120/apps/soto-player-community.png"
73
74 # 清理
75 rm -rf "${srcdir}/squashfs-root"
76}
77

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 15:17:04 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion