soundpad-bin
Package downloads a prebuilt binary from a GitHub release tied to the maintainer's repository; while the host is trusted, the binary's origin is not independently verifiable, but it is not obfuscated or executed in a malicious manner.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): Package downloads a prebuilt binary from a GitHub release tied to the maintainer's repository; while the host is trusted, the binary's origin is not independently verifiable, but it is not obfuscated or executed in a malicious manner.
PKGBUILD
# Maintainer: ametist1337 <ametist0yt@gmail.com>
pkgname=soundpad-bin
pkgver=0.2.0
pkgrel=1
pkgdesc="Soundpad alternative with PipeWire virtual mic & global hotkeys (Rust + egui)"
arch=('x86_64')
url="https://github.com/ametistik1337/soundpaad"
license=('MIT')
depends=('pipewire-pulse' 'libpulse' 'openssl')
optdepends=('pulseaudio: PulseAudio server (alternative to PipeWire)')
provides=('soundpad' 'soundpaad' 'soundpaaad-bin')
conflicts=('soundpad' 'soundpaad' 'soundpaaad-bin')
source=("soundpad-${pkgver}::https://github.com/ametistik1337/soundpaad/releases/download/v${pkgver}/soundpaad"
"com.soundpaad.app.desktop"
"com.soundpaad.app.svg")
sha256sums=('668df2c35e4abf155d544fd89df6c0734f3e7aaf1a79ebb99c0dc443e6575271'
'71ed0753bd4a074ef9ea75587925b46573d15688a538255553ecf414d91b6ad5'
'd356082e45c55f2e48f59821f280cf9799cbcb8238de0afe54ff296e2cb3e238')
package() {
install -Dm755 "soundpad-${pkgver}" "${pkgdir}/usr/bin/soundpaad"
ln -sf "soundpaad" "${pkgdir}/usr/bin/soundpad"
install -Dm644 "com.soundpaad.app.desktop" "${pkgdir}/usr/share/applications/com.soundpaad.app.desktop"
install -Dm644 "com.soundpaad.app.svg" "${pkgdir}/usr/share/icons/hicolor/scalable/apps/com.soundpaad.app.svg"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 03:59:29 | Low | 2 |