syrinc-git

LOW

maintainer kekmacska 0 votes scanned 2026-10-07 00:21:34.957174

View on AUR

Why flagged

The package builds from the project's own Git repository with no remote code execution, obfuscated downloads, or untrusted prebuilt binaries; the low severity is due to few votes and recent upload, not inherent risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from the project's own Git repository with no remote code execution, obfuscated downloads, or untrusted prebuilt binaries; the low severity is due to few votes and recent upload, not inherent risk.

PKGBUILD

      1# Maintainer: kekmacska
    
      2
    
      3pkgname=syrinc-git
    
      4pkgver=r26.g0b1052baf
    
      5pkgrel=1
    
      6pkgdesc='audio file handler which lets you embed, format and convert lyrics data to your favorite songs, to make them display and move along in your music player'
    
      7arch=('any')
    
      8license=('GPL-3.0')
    
      9url='https://github.com/techmanwalker/syrinc'
    
      10source=("git+$url.git")
    
      11makedepends=(cmake make pkgconf git cxxopts)
    
      12depends=(ffmpeg libstdc++)
    
      13provides=("${pkgname%-*}")
    
      14sha256sums=('SKIP')
    
      15
    
      16pkgver() {
    
      17    cd ${pkgname%-*}
    
      18
    
      19    # 2. Get git info
    
      20    commits=$(git rev-list --count HEAD)
    
      21    commit=$(git rev-parse --short=9 HEAD)
    
      22
    
      23    # 3. Print result
    
      24    printf 'r%s.g%s\n' "$commits" "$commit"
    
      25}
    
      26
    
      27build() {
    
      28    cd ${pkgname%-*}
    
      29
    
      30    BASE_CFLAGS="-O3 -march=native -mtune=native \
    
      31            -falign-functions=32 -falign-loops=32 \
    
      32            -fno-math-errno -fno-trapping-math \
    
      33            -fno-semantic-interposition \
    
      34            -fomit-frame-pointer -fno-plt \
    
      35            -pipe -flto -Wall -Wno-unused \
    
      36            -fstrict-aliasing \
    
      37            -fmerge-all-constants -ffunction-sections \
    
      38            -fdata-sections -fvisibility=hidden"
    
      39
    
      40    BASE_CXXFLAGS="$BASE_CFLAGS"
    
      41    BASE_LDFLAGS="-Wl,--icf=safe -Wl,--gc-sections -Wl,-O3 -flto -fno-plt"
    
      42
    
      43    # Clang-only flags
    
      44    CLANG_EXTRA_CFLAGS="-fstrict-vtable-pointers -fno-asynchronous-unwind-tables"
    
      45    CLANG_EXTRA_CXXFLAGS="$CLANG_EXTRA_CFLAGS"
    
      46    CLANG_EXTRA_LDFLAGS="-fuse-ld=lld"
    
      47
    
      48    # Detect compiler
    
      49    if command -v clang >/dev/null 2>&1; then
    
      50        export CC=clang
    
      51        export CXX=clang++
    
      52        export CFLAGS="$BASE_CFLAGS $CLANG_EXTRA_CFLAGS"
    
      53        export CXXFLAGS="$BASE_CXXFLAGS $CLANG_EXTRA_CXXFLAGS"
    
      54        export LDFLAGS="$BASE_LDFLAGS $CLANG_EXTRA_LDFLAGS"
    
      55    else
    
      56        export CC=gcc
    
      57        export CXX=g++
    
      58        export CFLAGS="$BASE_CFLAGS"
    
      59        export CXXFLAGS="$BASE_CXXFLAGS"
    
      60        export LDFLAGS="$BASE_LDFLAGS"
    
      61    fi
    
      62
    
      63    cmake -B build -DCMAKE_BUILD_TYPE=Release
    
      64
    
      65    cmake --build build --parallel "$(nproc)"
    
      66}
    
      67
    
      68package(){
    
      69    cd "$srcdir/${pkgname%-*}"
    
      70
    
      71    DESTDIR="$pkgdir" cmake --install build
    
      72
    
      73    install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      74}
    
      75

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-07 00:21:34	Low	2
2026-10-07 00:04:18	Low	2