transcribe

MEDIUM

maintainer rzvncj 12 votes scanned 2026-09-27 15:19:08.759284

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:17 source=("https://www.seventhstring.com/xscribe/downlo/xscsetup-${pkgver}.tar.gz")

Medium Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Razvan Cojocaru <razvanc[at]mailbox[dot]org>
    
      2# Contributor: Karl Ljungkvist <k[dot]ljungkvist[at]gmail[dot]com>
    
      3# Contributor: Gobidev <adrian[dot]groh[at]t-online[dot]de>
    
      4# Contributor: Dominik Schrempf <dominik dot schrempf at gmail dot com>
    
      5# Contributor: sekret, mail=$(echo c2VrcmV0QHBvc3Rlby5zZQo= | base64 -d)
    
      6
    
      7pkgname=transcribe
    
      8pkgver=9.70.0
    
      9pkgrel=1
    
      10pkgdesc="music transcription aid"
    
      11arch=('x86_64')
    
      12url="https://www.seventhstring.com/xscribe/overview.html"
    
      13license=('custom')
    
      14depends=('libsm' 'gtk3' 'gst-plugins-base-libs')
    
      15optdepends=('gst-plugin-pipewire')
    
      16options=(!strip)
    
      17source=("https://www.seventhstring.com/xscribe/downlo/xscsetup-${pkgver}.tar.gz")
    
      18sha256sums=('985bdc60971af84198500a7959d43d3594910636509d1cbd531ed726fd7f2abf')
    
      19
    
      20
    
      21package() {
    
      22  cd "$srcdir/$pkgname"
    
      23
    
      24  # Executable.
    
      25  install -Dm0755 "$pkgname" "$pkgdir/usr/lib/$pkgname/$pkgname"
    
      26  mkdir -p "$pkgdir/usr/bin"
    
      27  ln -s /usr/lib/$pkgname/$pkgname "$pkgdir/usr/bin/$pkgname"
    
      28
    
      29  # Documentation.
    
      30  install "xschelp.htb" "$pkgdir/usr/lib/$pkgname/"
    
      31
    
      32  # Library.
    
      33  lib="libgstvideosection.so"
    
      34  if [ -e "$lib" ]; then
    
      35    install -Dm0755 "$lib" "$pkgdir/usr/lib/gstreamer-1.0/$lib"
    
      36  fi
    
      37
    
      38  # Icons.
    
      39  for icon in gtkicons/xsc*png
    
      40  do
    
      41    unprefixed=${icon#*xsc}
    
      42    size=${unprefixed%.png}
    
      43    install -Dm0644 $icon "$pkgdir/usr/share/icons/hicolor/${size}/apps/seventhstring-transcribe.png"
    
      44  done
    
      45
    
      46  # Mime type with icon.
    
      47  mime_file=seventhstring-transcribe.xml
    
      48  cat <<"-EOF-" > $mime_file
    
      49<?xml version="1.0" encoding="UTF-8"?>
    
      50<mime-info xmlns="http://www.freedesktop.org/standards/shared-mime-info">
    
      51  <mime-type type="application/seventhstring-transcribe">
    
      52	<comment>Transcribe! File</comment>
    
      53	<glob pattern="*.xsc"/>
    
      54	<icon name="seventhstring-transcribe"/>
    
      55  </mime-type>
    
      56</mime-info>
    
      57-EOF-
    
      58  install -Dm0644 $mime_file "$pkgdir/usr/share/mime/packages/$mime_file"
    
      59
    
      60  # Application .desktop file.
    
      61  desktop_file=seventhstring-transcribe.desktop
    
      62  cat  << -EOF- > $desktop_file
    
      63[Desktop Entry]
    
      64Encoding=UTF-8
    
      65Version=1.0
    
      66Type=Application
    
      67MimeType=application/seventhstring-transcribe;
    
      68Exec=transcribe %f
    
      69Categories=Audio;
    
      70Terminal=false
    
      71Icon=seventhstring-transcribe
    
      72Name=Transcribe!
    
      73-EOF-
    
      74
    
      75  install -Dm0644 $desktop_file "$pkgdir/usr/share/applications/$desktop_file"
    
      76}
    
      77
    
      78# vim:set ts=2 sw=2 et:
    
      79

Changes since previous scan

--- PKGBUILD @ 2026-07-22 00:29
+++ PKGBUILD @ 2026-09-27 15:19
@@ -1,19 +1,21 @@
-# Maintainer: Karl Ljungkvist <k[dot]ljungkvist[at]gmail[dot]com>
+# Maintainer: Razvan Cojocaru <razvanc[at]mailbox[dot]org>
+# Contributor: Karl Ljungkvist <k[dot]ljungkvist[at]gmail[dot]com>
 # Contributor: Gobidev <adrian[dot]groh[at]t-online[dot]de>
 # Contributor: Dominik Schrempf <dominik dot schrempf at gmail dot com>
 # Contributor: sekret, mail=$(echo c2VrcmV0QHBvc3Rlby5zZQo= | base64 -d)
 
 pkgname=transcribe
-pkgver=9.60.0
+pkgver=9.70.0
 pkgrel=1
 pkgdesc="music transcription aid"
 arch=('x86_64')
 url="https://www.seventhstring.com/xscribe/overview.html"
-license=('unknown')
+license=('custom')
 depends=('libsm' 'gtk3' 'gst-plugins-base-libs')
 optdepends=('gst-plugin-pipewire')
+options=(!strip)
 source=("https://www.seventhstring.com/xscribe/downlo/xscsetup-${pkgver}.tar.gz")
-sha256sums=('45dda6ffbddf1b32f9a2ba95d6933c2c42a90dafee91ba5af35d299ea4c1fa44')
+sha256sums=('985bdc60971af84198500a7959d43d3594910636509d1cbd531ed726fd7f2abf')
 
 
 package() {

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-27 15:19:08	Medium	2
2026-09-27 13:18:29	Medium	2
2026-07-22 00:29:32	Clean	2
2026-07-21 19:17:41	Medium	1
2026-06-19 19:07:35	Clean	2
2026-06-19 18:54:17	Clean	2
2026-06-18 16:11:54	Medium	1