squelch

LOW

maintainer ieatfood314 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package builds from a legitimate project source and a pinned Git commit of a known dependency (whisper.cpp), with no evidence of malicious payloads or remote code execution; the 'SKIP' checksum for the Git source is normal for VCS sources and not inherently dangerous.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a legitimate project source and a pinned Git commit of a known dependency (whisper.cpp), with no evidence of malicious payloads or remote code execution; the 'SKIP' checksum for the Git source is normal for VCS sources and not inherently dangerous.

PKGBUILD

      1# Maintainer: Aidan Heeney <aidan.heeney@proton.me>
    
      2pkgname=squelch
    
      3pkgver=0.3.0
    
      4pkgrel=1
    
      5pkgdesc='Push-to-talk speech-to-text on GPU: Parakeet/Whisper, mic-array beamforming, Menu-key dictation'
    
      6arch=('x86_64')
    
      7url='https://github.com/ieatfood314/squelch'
    
      8license=('MIT')
    
      9depends=('python' 'python-evdev' 'python-numpy' 'python-pyqt6' 'ydotool'
    
      10         'wl-clipboard' 'libnotify' 'pipewire' 'vulkan-icd-loader' 'kanata')
    
      11makedepends=('git' 'cmake' 'vulkan-headers' 'spirv-headers')
    
      12optdepends=('python-huggingface_hub: alternative model downloads')
    
      13source=("$pkgname-$pkgver.tar.gz::$url/archive/refs/tags/v$pkgver.tar.gz"
    
      14        "whisper.cpp::git+https://github.com/ggml-org/whisper.cpp.git#commit=0c7be696371069e0baa2515ed7aa08d5a5473aa6")
    
      15sha256sums=('923032a9840a414f188945bc5e3d5d6e38b63b0ac08a1dbee4b23062739d1856'
    
      16            'SKIP')
    
      17options=('!debug')
    
      18
    
      19build() {
    
      20  cmake -S "$srcdir/whisper.cpp" -B "$srcdir/build" \
    
      21    -DGGML_VULKAN=ON -DCMAKE_BUILD_TYPE=Release
    
      22  cmake --build "$srcdir/build" --config Release -j"$(nproc)" \
    
      23    --target whisper-server whisper-cli parakeet-cli
    
      24}
    
      25
    
      26package() {
    
      27  install -Dm755 "$srcdir/build/bin/whisper-server" \
    
      28    "$srcdir/build/bin/whisper-cli" "$srcdir/build/bin/parakeet-cli" \
    
      29    -t "$pkgdir/usr/bin/"
    
      30  install -d "$pkgdir/usr/lib/"
    
      31  for f in "$srcdir/build/bin"/libwhisper.so* \
    
      32           "$srcdir/build/bin"/libparakeet.so* \
    
      33           "$srcdir/build/bin"/libggml*.so*; do
    
      34    [ -e "$f" ] || continue
    
      35    cp -d "$f" "$pkgdir/usr/lib/$(basename "$f")"
    
      36  done
    
      37  chmod 755 "$pkgdir"/usr/lib/lib*.so*
    
      38  cd "$srcdir/$pkgname-$pkgver"
    
      39  install -Dm755 src/squelch src/squelch-ptt src/squelch-parakeet-server \
    
      40    src/squelch-tray src/squelch-vram src/squelch-setup-models \
    
      41    -t "$pkgdir/usr/bin/"
    
      42  install -Dm644 systemd/*.service -t "$pkgdir/usr/lib/systemd/user/"
    
      43  install -Dm644 desktop/squelch.desktop -t \
    
      44    "$pkgdir/usr/share/applications/"
    
      45  install -Dm644 LICENSE -t "$pkgdir/usr/share/licenses/$pkgname/"
    
      46  install -Dm644 README.md kanata/snippet.kbd -t \
    
      47    "$pkgdir/usr/share/doc/$pkgname/"
    
      48}
    
      49

Changes since previous scan

--- PKGBUILD @ 2026-10-16 03:14
+++ PKGBUILD @ 2026-10-17 00:21
@@ -1,6 +1,6 @@
 # Maintainer: Aidan Heeney <aidan.heeney@proton.me>
 pkgname=squelch
-pkgver=0.2.0
+pkgver=0.3.0
 pkgrel=1
 pkgdesc='Push-to-talk speech-to-text on GPU: Parakeet/Whisper, mic-array beamforming, Menu-key dictation'
 arch=('x86_64')
@@ -12,7 +12,7 @@
 optdepends=('python-huggingface_hub: alternative model downloads')
 source=("$pkgname-$pkgver.tar.gz::$url/archive/refs/tags/v$pkgver.tar.gz"
         "whisper.cpp::git+https://github.com/ggml-org/whisper.cpp.git#commit=0c7be696371069e0baa2515ed7aa08d5a5473aa6")
-sha256sums=('b57b9fc5b0d79ab3dd3d144ccf9e8c2c3de38504dbef253ecde35cc724f2f54e'
+sha256sums=('923032a9840a414f188945bc5e3d5d6e38b63b0ac08a1dbee4b23062739d1856'
             'SKIP')
 options=('!debug')
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 05:14:45	Low	2
2026-10-16 03:14:05	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 03:10:23	Low	2