soundly

LOW

maintainer ArchLars 0 votes scanned 2026-09-01 00:11:19.967602

View on AUR

Why flagged

The package requires manual download of a Debian archive and license file from specified URLs, but does not automatically fetch or execute unverified remote code; the build process only extracts and installs from locally-provided files, posing minimal risk despite non-standard sourcing.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package requires manual download of a Debian archive and license file from specified URLs, but does not automatically fetch or execute unverified remote code; the build process only extracts and installs from locally-provided files, posing minimal risk despite non-standard sourcing.

PKGBUILD

      1# Maintainer: ArchLars <aur@larsoyd.com>
    
      2
    
      3pkgname=soundly
    
      4pkgver=2026.06.37_20260629.1214
    
      5pkgrel=2
    
      6pkgdesc='Sound effects search, audio editor and library manager'
    
      7arch=('x86_64')
    
      8url='https://getsoundly.com'
    
      9license=('LicenseRef-Soundly')
    
      10depends=(
    
      11  'alsa-lib'
    
      12  'bash'
    
      13  'desktop-file-utils'
    
      14  'glibc'
    
      15  'hicolor-icon-theme'
    
      16  'krb5'
    
      17  'libxcb'
    
      18  'libxkbcommon-x11'
    
      19  'xcb-util-cursor'
    
      20  'xcb-util-image'
    
      21  'xcb-util-keysyms'
    
      22  'xcb-util-renderutil'
    
      23  'xcb-util-wm'
    
      24)
    
      25optdepends=(
    
      26  'kdotool: one-click spotting into Kdenlive and Studio One on Wayland'
    
      27  'wl-clipboard: one-click spotting into Kdenlive and Studio One on Wayland'
    
      28  'wmctrl: raise REAPER, DaVinci Resolve, or Ardour after spotting'
    
      29)
    
      30options=('!strip')
    
      31_archive_sha256='57c5b108e26814a37101a13e585e0e905805963f96280aff856f06824dd32e19'
    
      32_terms_sha256='0587c393077596b38045fddb4da29c186b9a04fb492ab4d53a1c37d04c9ef67b'
    
      33
    
      34# Soundly's Terms require these files to be downloaded manually. Before
    
      35# building, use a normal web browser to download the Debian / Ubuntu archive
    
      36# and the Terms of Use, then place both files beside this PKGBUILD using the
    
      37# exact filenames below:
    
      38# https://storage.googleapis.com/soundly-linux-release/latest/soundly-linux-latest-deb.zip
    
      39# https://getsoundly.com/assets/Soundly-General-Terms-of-Use.pdf
    
      40source=(
    
      41  'local://soundly-linux-latest-deb.zip'
    
      42  'local://Soundly-General-Terms-of-Use.pdf'
    
      43)
    
      44sha256sums=(
    
      45  "${_archive_sha256}"
    
      46  "${_terms_sha256}"
    
      47)
    
      48
    
      49package() {
    
      50  local deb data_member
    
      51  local -a debs data_members
    
      52
    
      53  mapfile -t debs < <(find "$srcdir" -maxdepth 1 -type f -name 'soundly_*_amd64.deb' -print)
    
      54  if (( ${#debs[@]} != 1 )); then
    
      55    printf 'ERROR: expected exactly one soundly_*_amd64.deb, found %s\n' "${#debs[@]}" >&2
    
      56    return 1
    
      57  fi
    
      58  deb=${debs[0]}
    
      59
    
      60  mapfile -t data_members < <(bsdtar -tf "$deb" | sed -n '/^data\.tar\./p')
    
      61  if (( ${#data_members[@]} != 1 )); then
    
      62    printf 'ERROR: expected exactly one data.tar archive in %s\n' "${deb##*/}" >&2
    
      63    return 1
    
      64  fi
    
      65  data_member=${data_members[0]}
    
      66
    
      67  set -o pipefail
    
      68  bsdtar -xOf "$deb" "$data_member" | bsdtar -xf - -C "$pkgdir"
    
      69
    
      70  install -Dm644 "$srcdir/Soundly-General-Terms-of-Use.pdf" \
    
      71    "$pkgdir/usr/share/licenses/$pkgname/Soundly-Terms-of-Use.pdf"
    
      72}
    
      73

Changes since previous scan

--- PKGBUILD @ 2026-08-31 17:46
+++ PKGBUILD @ 2026-09-01 00:11
@@ -1,7 +1,7 @@
 # Maintainer: ArchLars <aur@larsoyd.com>
 
 pkgname=soundly
-pkgver=2026.06.37
+pkgver=2026.06.37_20260629.1214
 pkgrel=2
 pkgdesc='Sound effects search, audio editor and library manager'
 arch=('x86_64')

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-01 00:11:19	Low	2
2026-08-31 19:46:16	Low	2
2026-08-31 17:46:09	Low	2
2026-08-31 15:45:42	Low	2