wavetune-git

LOW

maintainer onlymash 0 votes scanned 2026-10-29 09:52:05.005162

View on AUR

Why flagged

The package builds from source via git from the maintainer's own GitHub repository, which is normal for AUR git packages; the low severity is due to few votes and recent upload, not malicious content.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from source via git from the maintainer's own GitHub repository, which is normal for AUR git packages; the low severity is due to few votes and recent upload, not malicious content.

PKGBUILD

      1# Maintainer: onlymash <fiepi.dev@gmail.com>
    
      2pkgname=wavetune-git
    
      3_pkgname=wavetune
    
      4pkgver=r6.g0e58965
    
      5pkgrel=1
    
      6pkgdesc="Unofficial wireless headset control center for Linux (git version)"
    
      7arch=('x86_64' 'aarch64')
    
      8url="https://github.com/onlymash/WaveTune"
    
      9license=('GPL-3.0-only')
    
      10depends=(
    
      11    'bluez'
    
      12    'bluez-libs'
    
      13    'dbus'
    
      14    'glib2'
    
      15    'glibc'
    
      16    'gtk4'
    
      17    'hicolor-icon-theme'
    
      18    'libadwaita'
    
      19    'libgcc'
    
      20    'pango'
    
      21)
    
      22makedepends=(
    
      23    'cargo'
    
      24    'git'
    
      25)
    
      26provides=("$_pkgname")
    
      27conflicts=("$_pkgname")
    
      28# LTO and symbol stripping are configured in Cargo.toml's release profile.
    
      29options=('!lto' '!debug')
    
      30source=("$_pkgname::git+$url.git")
    
      31sha256sums=('SKIP')
    
      32
    
      33pkgver() {
    
      34    cd "$_pkgname"
    
      35    if git describe --long --tags --match 'v[0-9]*' >/dev/null 2>&1; then
    
      36        git describe --long --tags --match 'v[0-9]*' --abbrev=7 | sed 's/^v//;s/\([^-]*-g\)/r\1/;s/-/./g'
    
      37    else
    
      38        printf 'r%s.g%s' "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
    
      39    fi
    
      40}
    
      41
    
      42prepare() {
    
      43    cd "$_pkgname"
    
      44    export RUSTUP_TOOLCHAIN=stable
    
      45    cargo fetch --locked --target "$(rustc -vV | sed -n 's/host: //p')"
    
      46}
    
      47
    
      48build() {
    
      49    cd "$_pkgname"
    
      50    export RUSTUP_TOOLCHAIN=stable
    
      51    export CARGO_TARGET_DIR=target
    
      52    cargo build --frozen --release --all-features
    
      53}
    
      54
    
      55check() {
    
      56    cd "$_pkgname"
    
      57    export RUSTUP_TOOLCHAIN=stable
    
      58    export CARGO_TARGET_DIR=target
    
      59    export XDG_CACHE_HOME="$srcdir/.cache"
    
      60    export XDG_CONFIG_HOME="$srcdir/.config"
    
      61    export XDG_DATA_HOME="$srcdir/.local/share"
    
      62    cargo test --frozen --all-features
    
      63}
    
      64
    
      65package() {
    
      66    cd "$_pkgname"
    
      67    sh packaging/install.sh "$pkgdir" target/release/wavetune
    
      68}
    
      69

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-29 09:52:05	Low	2
2026-10-29 07:52:02	Low	2