unbloatedtube-bin

LOW

maintainer antlis 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

Package installs a prebuilt binary from the project's own GitHub releases, which is a normal and acceptable practice for AUR packages; the low severity is due to few votes and recent upload, not malicious content.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): Package installs a prebuilt binary from the project's own GitHub releases, which is a normal and acceptable practice for AUR packages; the low severity is due to few votes and recent upload, not malicious content.

PKGBUILD

      1# Maintainer: antlis <antlis@protonmail.com>
    
      2# Installs the prebuilt Linux binary from the GitHub release (no compiling).
    
      3pkgname=unbloatedtube-bin
    
      4_name=unbloatedtube
    
      5pkgver=0.43.3
    
      6pkgrel=1
    
      7pkgdesc='Lightweight, configurable YouTube desktop client: GPUI, embedded mpv, yt-dlp (prebuilt binary)'
    
      8arch=('x86_64')
    
      9url='https://github.com/antlis/UnbloatedTube'
    
      10license=('AGPL-3.0-only')
    
      11depends=('gcc-libs' 'glibc' 'libxcb' 'libxkbcommon' 'libxkbcommon-x11' 'wayland'
    
      12         'vulkan-icd-loader' 'vulkan-driver' 'mpv' 'yt-dlp' 'deno')
    
      13# The package was unbloated-youtube-bin before 0.34.0; that name is now a transitional package
    
      14# that depends on this one (packaging/aur/transitional), so this one must not conflict with it.
    
      15provides=("$_name" 'unbloated-youtube')
    
      16conflicts=("$_name")
    
      17options=('!strip')
    
      18source=("$url/releases/download/v$pkgver/$_name-$pkgver-x86_64-linux.tar.gz")
    
      19sha256sums=('b4e47b1456b1b98509cb8289d6c4ce5eec3f59f8910ba8a0ab0e9162d7865ba6')
    
      20
    
      21package() {
    
      22  cd "$_name-$pkgver-x86_64-linux"
    
      23  install -Dm755 "$_name" "$pkgdir/usr/bin/$_name"
    
      24  # A short name, and the command's name before 0.34.0 (so key bindings and scripts keep working).
    
      25  ln -s "$_name" "$pkgdir/usr/bin/ubt"
    
      26  ln -s "$_name" "$pkgdir/usr/bin/unbloated-youtube"
    
      27  install -Dm644 "$_name.desktop" "$pkgdir/usr/share/applications/$_name.desktop"
    
      28  install -Dm644 "$_name.svg" "$pkgdir/usr/share/icons/hicolor/scalable/apps/$_name.svg"
    
      29  install -Dm644 README.md "$pkgdir/usr/share/doc/$pkgname/README.md"
    
      30  install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      31}
    
      32

Changes since previous scan

--- PKGBUILD @ 2026-10-14 21:20
+++ PKGBUILD @ 2026-10-17 00:21
@@ -2,7 +2,7 @@
 # Installs the prebuilt Linux binary from the GitHub release (no compiling).
 pkgname=unbloatedtube-bin
 _name=unbloatedtube
-pkgver=0.43.0
+pkgver=0.43.3
 pkgrel=1
 pkgdesc='Lightweight, configurable YouTube desktop client: GPUI, embedded mpv, yt-dlp (prebuilt binary)'
 arch=('x86_64')
@@ -16,7 +16,7 @@
 conflicts=("$_name")
 options=('!strip')
 source=("$url/releases/download/v$pkgver/$_name-$pkgver-x86_64-linux.tar.gz")
-sha256sums=('2751bc34dbe741eee9fec751c4ac1ade3f85bd51dbdd21d3b1e940dbadeb01b5')
+sha256sums=('b4e47b1456b1b98509cb8289d6c4ce5eec3f59f8910ba8a0ab0e9162d7865ba6')
 
 package() {
   cd "$_name-$pkgver-x86_64-linux"

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 23:21:11	Low	2
2026-10-14 21:20:28	Low	2
2026-10-14 11:19:54	Low	2
2026-10-14 09:19:50	Low	1
2026-10-14 00:06:47	Clean	2
2026-10-13 21:18:20	Low	1
2026-10-13 00:23:45	Low	2
2026-10-12 00:18:51	Low	2
2026-10-11 00:26:05	Low	2
2026-10-10 16:14:21	Low	2
2026-10-10 14:14:18	Low	2
2026-10-10 12:14:12	Low	1
2026-10-10 10:13:47	Low	1