wave-bin

LOW

maintainer roughcast-finali 0 votes scanned 2026-09-17 19:25:56.508581

View on AUR

Why flagged

The package installs a prebuilt AppImage from the project's official GitHub releases, which is a common but less ideal practice; the source is verifiable and checksummed, reducing risk, but distributing binaries instead of building from source limits auditability.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt AppImage from the project's official GitHub releases, which is a common but less ideal practice; the source is verifiable and checksummed, reducing risk, but distributing binaries instead of building from source limits auditability.

PKGBUILD

      1# Maintainer: roughcast-finali <aur.archlinux.org.eggbeater055@passmail.com>
    
      2
    
      3pkgname=wave-bin
    
      4_pkgname=WAVE
    
      5pkgver=1.1.4
    
      6pkgrel=1
    
      7pkgdesc="Modern and sleek cross-platform music streaming player"
    
      8arch=('x86_64')
    
      9url="https://waveapp.pages.dev"
    
      10license=('GPL-2.0-only')
    
      11depends=(
    
      12    'gtk3'
    
      13    'mpv'
    
      14    'hicolor-icon-theme'
    
      15    'libsecret'
    
      16    'alsa-lib'
    
      17)
    
      18provides=('wave' 'wave-app' 'wave-music')
    
      19conflicts=('wave' 'wave-app' 'wave-music')
    
      20options=('!strip')
    
      21
    
      22_appimage="${pkgname}-${pkgver}.AppImage"
    
      23source=("${_appimage}::https://github.com/ayman708-UX/WAVE/releases/download/v${pkgver}/WAVE-Linux-x86_64.AppImage"
    
      24        "wave.desktop")
    
      25noextract=("${_appimage}")
    
      26sha256sums=('61c187dbd8af5463e06c4e7b5eae016bf75aa3afb0413548831676039b9b3304'
    
      27            'f3fc91c30000b23a9fd7c7ad2f1979528e398157d813516fbcdd52c9c5ce7d7d')
    
      28
    
      29prepare() {
    
      30    chmod +x "${_appimage}"
    
      31    rm -rf squashfs-root
    
      32    ./"${_appimage}" --appimage-extract
    
      33}
    
      34
    
      35package() {
    
      36    # Install application bundle to /opt/wave
    
      37    install -dm755 "${pkgdir}/opt/wave"
    
      38    cp -ra "${srcdir}/squashfs-root/data" "${pkgdir}/opt/wave/"
    
      39    cp -ra "${srcdir}/squashfs-root/lib" "${pkgdir}/opt/wave/"
    
      40    install -Dm755 "${srcdir}/squashfs-root/wave" "${pkgdir}/opt/wave/wave"
    
      41
    
      42    # Install binary symlink
    
      43    install -dm755 "${pkgdir}/usr/bin"
    
      44    ln -s /opt/wave/wave "${pkgdir}/usr/bin/wave"
    
      45
    
      46    # Install desktop entry
    
      47    install -Dm644 "${srcdir}/wave.desktop" "${pkgdir}/usr/share/applications/wave.desktop"
    
      48
    
      49    # Install icons in standard sizes and pixmaps
    
      50    install -Dm644 "${srcdir}/squashfs-root/WAVE.png" "${pkgdir}/usr/share/icons/hicolor/1024x1024/apps/wave.png"
    
      51    install -Dm644 "${srcdir}/squashfs-root/WAVE.png" "${pkgdir}/usr/share/icons/hicolor/512x512/apps/wave.png"
    
      52    install -Dm644 "${srcdir}/squashfs-root/WAVE.png" "${pkgdir}/usr/share/pixmaps/wave.png"
    
      53    install -Dm644 "${srcdir}/squashfs-root/WAVE.png" "${pkgdir}/usr/share/pixmaps/WAVE.png"
    
      54}
    
      55

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 19:25:56	Low	2