soundcraft-bin
Package downloads prebuilt binaries from the project's official GitHub releases; while the binaries are not built from source, they come from a trusted project host with verifiable checksums, limiting risk to typical supply-chain trust in the upstream provider.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): Package downloads prebuilt binaries from the project's official GitHub releases; while the binaries are not built from source, they come from a trusted project host with verifiable checksums, limiting risk to typical supply-chain trust in the upstream provider.
PKGBUILD
# Maintainer: Athulkrishna <athulkrishnasv2015@gmail.com>
pkgname=soundcraft-bin
_pkgname=soundcraft
pkgver=0.7.0
pkgrel=1
pkgdesc="Open-source native digital audio workstation, Pro Tools alternative (prebuilt binary)"
arch=('x86_64' 'aarch64')
url="https://github.com/storytold/soundcraft"
license=('Apache-2.0' 'MIT')
depends=('alsa-lib' 'gcc-libs' 'glibc' 'hicolor-icon-theme' 'libxkbcommon')
optdepends=('vulkan-icd-loader: GPU-accelerated rendering')
provides=("$_pkgname")
conflicts=("$_pkgname")
options=('!strip')
source_x86_64=("$_pkgname-$pkgver-linux-x86_64.tar.gz::$url/releases/download/v$pkgver/$_pkgname-$pkgver-linux-x86_64.tar.gz")
source_aarch64=("$_pkgname-$pkgver-linux-aarch64.tar.gz::$url/releases/download/v$pkgver/$_pkgname-$pkgver-linux-aarch64.tar.gz")
sha256sums_x86_64=('8d7afbe5fe433cb338b7ccee0820285d6ce1bfc8c006d551ca8840c27a911ab2')
sha256sums_aarch64=('5b5152464bd6a3ae6c48be026d80e0c4e0da58d581a45fe4b5803d6fcfbbe006')
package() {
local _root="$srcdir/$_pkgname-$pkgver-linux-$CARCH"
install -Dm755 "$_root/bin/$_pkgname" "$pkgdir/usr/bin/$_pkgname"
install -Dm755 "$_root/bin/$_pkgname-cli" "$pkgdir/usr/bin/$_pkgname-cli"
cp -a "$_root/share" "$pkgdir/usr/share"
install -Dm644 "$_root/share/doc/$_pkgname/LICENSE-APACHE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE-APACHE"
install -Dm644 "$_root/share/doc/$_pkgname/LICENSE-MIT" "$pkgdir/usr/share/licenses/$pkgname/LICENSE-MIT"
}
Changes since previous scan
--- PKGBUILD @ 2026-10-14 00:06+++ PKGBUILD @ 2026-10-17 00:21@@ -1,7 +1,7 @@ # Maintainer: Athulkrishna <athulkrishnasv2015@gmail.com> pkgname=soundcraft-bin _pkgname=soundcraft-pkgver=0.6.1+pkgver=0.7.0 pkgrel=1 pkgdesc="Open-source native digital audio workstation, Pro Tools alternative (prebuilt binary)" arch=('x86_64' 'aarch64')@@ -14,8 +14,8 @@ options=('!strip') source_x86_64=("$_pkgname-$pkgver-linux-x86_64.tar.gz::$url/releases/download/v$pkgver/$_pkgname-$pkgver-linux-x86_64.tar.gz") source_aarch64=("$_pkgname-$pkgver-linux-aarch64.tar.gz::$url/releases/download/v$pkgver/$_pkgname-$pkgver-linux-aarch64.tar.gz")-sha256sums_x86_64=('f3bfa3735146e4d7b12cd8363b8fe77bbeff31ee95392295033f50b1916efcee')-sha256sums_aarch64=('55a18458670f1723edc8ba45da01f3dd8b85feba7cc3f83d44e7038120245ca4')+sha256sums_x86_64=('8d7afbe5fe433cb338b7ccee0820285d6ce1bfc8c006d551ca8840c27a911ab2')+sha256sums_aarch64=('5b5152464bd6a3ae6c48be026d80e0c4e0da58d581a45fe4b5803d6fcfbbe006') package() { local _root="$srcdir/$_pkgname-$pkgver-linux-$CARCH"Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 21:20:28 | Low | 2 |
| 2026-10-14 00:06:47 | Medium | 2 |
| 2026-10-13 00:23:45 | Medium | 2 |
| 2026-10-12 23:15:20 | Medium | 2 |
| 2026-10-12 00:18:51 | Low | 2 |
| 2026-10-11 11:10:32 | Low | 2 |
| 2026-10-11 05:10:24 | Low | 2 |
| 2026-10-11 00:26:05 | Low | 2 |
| 2026-10-10 14:14:18 | Low | 2 |
| 2026-10-10 00:11:52 | Low | 2 |
| 2026-10-09 20:12:40 | Low | 2 |