yadal-git

maintainer Tomkoid · 1 votes · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged The package builds from source hosted on the maintainer's own Codeberg repository, which is a plausible project-owned forge; the SKIP'd checksum is a quality issue but not inherently dangerous since the source is openly reviewable and the build process is standard for Rust software.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from source hosted on the maintainer's own Codeberg repository, which is a plausible project-owned forge; the SKIP'd checksum is a quality issue but not inherently dangerous since the source is openly reviewable and the build process is standard for Rust software.

PKGBUILD

      1# Maintainer: Tomkoid <tomkoid@tomkoid.cz>
    
      2pkgname="yadal-git"
    
      3pkgver=0.3.0.r7.g9a7a7be
    
      4pkgrel=1
    
      5pkgdesc="Yet another TIDAL track, playlist, album CLI downloader"
    
      6url="https://codeberg.org/tomkoid/yadal"
    
      7arch=("any")
    
      8makedepends=("cargo" "cmake" "git" "gcc" "base-devel" "pkg-config" "ffmpeg")
    
      9license=("GPL3")
    
      10source=("yadal::git+https://codeberg.org/tomkoid/yadal")
    
      11sha256sums=("SKIP")
    
      12
    
      13_PKGNAME="yadal"
    
      14
    
      15prepare() {
    
      16  cd "$_PKGNAME"
    
      17  cargo fetch --locked --target "$(rustc -vV | sed -n 's/host: //p')"
    
      18}
    
      19
    
      20build() {
    
      21  cd "$_PKGNAME"
    
      22  CFLAGS="" CXXFLAGS="" LDFLAGS="" cargo build --release --frozen
    
      23}
    
      24
    
      25check() {
    
      26  cd "$_PKGNAME"
    
      27  CFLAGS="" CXXFLAGS="" LDFLAGS="" cargo test --frozen
    
      28}
    
      29
    
      30package() {
    
      31  cd "$_PKGNAME"
    
      32  install -Dm755 "${srcdir}/yadal/target/release/yadal" "${pkgdir}/usr/bin/yadal"
    
      33}
    
      34
    
      35pkgver() {
    
      36  cd "$_PKGNAME"
    
      37  git describe --long --tags --abbrev=7 | sed 's/^v//;s/\([^-]*-g\)/r\1/;s/-/./g'
    
      38}
    
      39

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	2
2026-08-17 00:18:29	LOW	2
2026-08-16 00:03:42	LOW	2
2026-08-15 00:26:13	LOW	2
2026-08-14 15:29:17	LOW	2
2026-08-14 13:29:16	LOW	2