tune-server

LOW
maintainer blackhole 1 votes scanned 2026-10-17 00:21:55.226236
View on AUR
Why flagged

The package installs a prebuilt binary from the project's official GitHub releases, which is a normal distribution method; the source is verifiable and checksummed, posing no active threat.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's official GitHub releases, which is a normal distribution method; the source is verifiable and checksummed, posing no active threat.

PKGBUILD

1# Maintainer: Audiolinux audiolinux@fastmail.fm
2
3pkgname=tune-server
4pkgver=1.0.0.rc6
5_pkgver=1.0.0
6rc=6
7pkgrel=1
8pkgdesc="self-hosted multi-room music server in Rust: local library (FLAC/DSD) + Qobuz/Tidal/Deezer to DLNA/UPnP, Chromecast, AirPlay"
9arch=('x86_64' 'aarch64')
10url="https://mozaiklabs.fr/"
11license=('custom')
12depends=('libstdc++' 'python' 'alsa-lib' 'ffmpeg' 'portaudio' 'avahi')
13source=('tune-server.service' 'sysusers.d' 'tmpfiles.d')
14source_x86_64=("https://github.com/renesenses/tune-server-rust/releases/download/v$_pkgver-rc"$rc"/tune-server_$_pkgver-rc"$rc"_amd64.deb")
15source_aarch64=("https://github.com/renesenses/tune-server-rust/releases/download/v$_pkgver-rc"$rc"/tune-server_$_pkgver-rc"$rc"_arm64.deb")
16sha256sums=('57cc779089fdd19aae126c1bf6d3257af48d34c4bf6f4f16ae0f77a532f61a60' 'ea2a97dca78b25341876c1d62b66a9561a7fd40197137b0e104c565b25d59cf4' '6e7a92685d8020446dd929c6da56a69f5d2e82d40d90cf82c43607b559943396')
17sha256sums_x86_64=('c5a81f119b8b6c27ea5109dce397611ffdb355782c2b1546286ccda0a8b3bf48')
18sha256sums_aarch64=('88d59f67855cb5f7311cd97267e8dee517501742926ac8901415805a5f25e028')
19install=$pkgname.install
20backup=(etc/default/hqplayer/tune-server)
21
22package() {
23cd "$srcdir"
24bsdtar xf data.tar.zst -C "$pkgdir"
25install -Dm644 $pkgdir/lib/systemd/system/tune-server.service $pkgdir/usr/lib/systemd/system/tune-server.service
26rm -rf $pkgdir/lib
27install -Dm644 tmpfiles.d $pkgdir/usr/lib/tmpfiles.d/tune-server.conf
28install -Dm644 sysusers.d $pkgdir/usr/lib/sysusers.d/tune-server.conf
29}
30

Changes since previous scan

--- PKGBUILD @ 2026-10-15 00:28
+++ PKGBUILD @ 2026-10-17 00:21
@@ -1,9 +1,9 @@
# Maintainer: Audiolinux audiolinux@fastmail.fm
pkgname=tune-server
-pkgver=1.0.0.rc4
+pkgver=1.0.0.rc6
_pkgver=1.0.0
-rc=4
+rc=6
pkgrel=1
pkgdesc="self-hosted multi-room music server in Rust: local library (FLAC/DSD) + Qobuz/Tidal/Deezer to DLNA/UPnP, Chromecast, AirPlay"
arch=('x86_64' 'aarch64')
@@ -14,8 +14,8 @@
source_x86_64=("https://github.com/renesenses/tune-server-rust/releases/download/v$_pkgver-rc"$rc"/tune-server_$_pkgver-rc"$rc"_amd64.deb")
source_aarch64=("https://github.com/renesenses/tune-server-rust/releases/download/v$_pkgver-rc"$rc"/tune-server_$_pkgver-rc"$rc"_arm64.deb")
sha256sums=('57cc779089fdd19aae126c1bf6d3257af48d34c4bf6f4f16ae0f77a532f61a60' 'ea2a97dca78b25341876c1d62b66a9561a7fd40197137b0e104c565b25d59cf4' '6e7a92685d8020446dd929c6da56a69f5d2e82d40d90cf82c43607b559943396')
-sha256sums_x86_64=('5ea24c598b3b36f761518c623d5d80ac25bf2cde3b5bed6b152ee12d742d4d3c')
-sha256sums_aarch64=('c5eb496d41bab94db715137da70b606024d50f978377d795d5e90639bba4e63b')
+sha256sums_x86_64=('c5a81f119b8b6c27ea5109dce397611ffdb355782c2b1546286ccda0a8b3bf48')
+sha256sums_aarch64=('88d59f67855cb5f7311cd97267e8dee517501742926ac8901415805a5f25e028')
install=$pkgname.install
backup=(etc/default/hqplayer/tune-server)

Scan history

Scanned at (UTC)SeverityRules
2026-10-17 00:21:55 Low 2
2026-10-16 00:12:47 Low 2
2026-10-15 15:12:23 Low 2
2026-10-15 00:28:05 Medium 2
2026-10-14 00:06:47 Medium 2
2026-10-13 00:23:45 Medium 2
2026-10-12 13:13:52 Medium 2
2026-10-12 00:18:51 Medium 2
2026-10-11 00:26:05 Medium 2
2026-10-10 20:15:50 Medium 2
2026-10-10 00:11:52 Low 2
2026-10-09 12:11:09 Low 2
2026-10-09 10:10:57 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion