spo-cli-bin

LOW

maintainer yjy 0 votes scanned 2026-10-06 00:13:36.889724

View on AUR

Why flagged

The package installs a prebuilt binary from the project's GitHub releases, which is a normal practice for AUR packages; while the host is not whitelisted, it is the project's official release infrastructure, and the binary is not obfuscated or executed remotely.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's GitHub releases, which is a normal practice for AUR packages; while the host is not whitelisted, it is the project's official release infrastructure, and the binary is not obfuscated or executed remotely.

PKGBUILD

      1pkgname=spo-cli-bin
    
      2pkgver=0.6.6
    
      3pkgrel=1
    
      4pkgdesc="a spotify tui app, less is more"
    
      5arch=('x86_64')
    
      6url="https://github.com/woquchonglang/spo-cli"
    
      7license=('GPL-2.1')
    
      8depends=('glibc')
    
      9options=('!debug' '!strip')
    
      10makedepends=('git' 'cmake' 'ninja' 'clang' 'mold' 'sdbus-cpp' 'python' 'pkgconf' 'openssl' 'alsa-lib' 'fftw' 'boost' 'liburing' 'ccache')
    
      11source=("$pkgname-$pkgver.tar.gz::$url/releases/download/v$pkgver/spo-cli-x86_64-unknown-linux-gnu.tar.gz")
    
      12sha256sums=('30f8fd735cd49ff505809214e1532d5d2df5df9452d5e5aee5a6b62e013cfbda')
    
      13
    
      14package() {
    
      15  install -Dm755 "$srcdir/spo-cli" "$pkgdir/usr/bin/spo-cli"
    
      16}
    
      17

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-06 00:13:36	Low	2
2026-10-05 23:40:58	Low	2