stillmusic-bin
LOW
maintainer horizzon
0 votes
scanned 2026-10-25 19:43:04.801001
Why flagged
The package downloads a prebuilt binary from a GitHub release, which is a common and generally acceptable practice; the low severity is due to limited votes and recent upload, not malicious content.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from a GitHub release, which is a common and generally acceptable practice; the low severity is due to limited votes and recent upload, not malicious content.
PKGBUILD
1
# Maintainer: Gabriel <horizzon3507>
2
pkgname=stillmusic-bin
3
pkgver=0.3.0beta1
4
_tag=0.3.0-beta.1
5
pkgrel=1
6
pkgdesc='Minimal black and white CLI music player powered by MPV (prebuilt binary)'
7
arch=('x86_64')
8
url='https://github.com/fireflylabss/optionMusic'
9
license=('Apache-2.0')
10
depends=('mpv' 'libgcc' 'glibc' 'sqlite')
11
optdepends=('cava: spectrum bars'
12
'yt-dlp: download music and videos'
13
'ffmpeg: extract and convert downloaded audio'
14
'tar: export and import backups')
15
provides=("stillmusic=$pkgver")
16
conflicts=('stillmusic' 'optionmusic' 'optmusic')
17
options=('!strip' '!lto')
18
source=("$url/releases/download/v$_tag/stillmusic-v$_tag-$CARCH-unknown-linux-gnu.tar.gz")
19
sha256sums=('ffadb3b0b0dd99aedeac613d97295044b8d41aff284ba12f9dc121db28485840')
20
21
package() {
22
install -Dm755 still "$pkgdir/usr/bin/still"
23
install -Dm755 msc "$pkgdir/usr/bin/msc"
24
install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
25
install -Dm644 README.md "$pkgdir/usr/share/doc/$pkgname/README.md"
26
}
27
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-25 19:43:04 | Low | 2 |