yaqmc-bin

LOW

maintainer Osilvfe 0 votes scanned 2026-10-17 07:17:15.137327

View on AUR

Why flagged

The package installs an official Electron binary release from the project's GitHub releases, which is a normal and expected practice for unofficial clients; the low severity is due to few votes and recent upload, not malicious behavior.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs an official Electron binary release from the project's GitHub releases, which is a normal and expected practice for unofficial clients; the low severity is due to few votes and recent upload, not malicious behavior.

PKGBUILD

      1# Maintainer: Osilvfe <osilvfe@gmail.com>
    
      2
    
      3pkgname=yaqmc-bin
    
      4pkgver=0.1.1
    
      5pkgrel=1
    
      6pkgdesc='Unofficial QQ Music client (official Electron binary release)'
    
      7arch=('x86_64' 'aarch64')
    
      8url='https://github.com/YAQMC/YAQMC'
    
      9license=('GPL-3.0-or-later')
    
      10depends=(
    
      11  'alsa-lib'
    
      12  'at-spi2-core'
    
      13  'cairo'
    
      14  'dbus'
    
      15  'expat'
    
      16  'glib2'
    
      17  'gtk3'
    
      18  'hicolor-icon-theme'
    
      19  'libcups'
    
      20  'libnotify'
    
      21  'libsecret'
    
      22  'libx11'
    
      23  'libxcb'
    
      24  'libxcomposite'
    
      25  'libxdamage'
    
      26  'libxext'
    
      27  'libxfixes'
    
      28  'libxkbcommon'
    
      29  'libxrandr'
    
      30  'libxss'
    
      31  'libxtst'
    
      32  'mesa'
    
      33  'nspr'
    
      34  'nss'
    
      35  'pango'
    
      36  'systemd-libs'
    
      37  'xdg-utils'
    
      38)
    
      39optdepends=('libayatana-appindicator: system tray support')
    
      40provides=('yaqmc')
    
      41conflicts=('yaqmc' 'yaqmc-git')
    
      42options=('!strip' '!debug')
    
      43source=("LICENSE::https://raw.githubusercontent.com/YAQMC/YAQMC/v${pkgver}/LICENSE")
    
      44source_x86_64=("YAQMC-linux-x64.deb::https://github.com/YAQMC/YAQMC/releases/download/v${pkgver}/YAQMC-linux-x64.deb")
    
      45source_aarch64=("YAQMC-linux-arm64.deb::https://github.com/YAQMC/YAQMC/releases/download/v${pkgver}/YAQMC-linux-arm64.deb")
    
      46sha256sums=('3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986')
    
      47sha256sums_x86_64=('9fef3753d42070c0e4ff83edc360fb5ee6933231233c9bb43b16d5e82ac190b4')
    
      48sha256sums_aarch64=('12408a9f00a35e64e4bb16f9f887f0f4ceff5149aa5469ad780ace0298690a39')
    
      49
    
      50prepare() {
    
      51  local _asset_arch
    
      52  case "$CARCH" in
    
      53    x86_64) _asset_arch=x64 ;;
    
      54    aarch64) _asset_arch=arm64 ;;
    
      55    *) exit 1 ;;
    
      56  esac
    
      57
    
      58  install -d "${srcdir}/deb" "${srcdir}/pkg"
    
      59  bsdtar -xf "${srcdir}/YAQMC-linux-${_asset_arch}.deb" -C "${srcdir}/deb"
    
      60  bsdtar -xf "${srcdir}/deb/data.tar.xz" -C "${srcdir}/pkg"
    
      61}
    
      62
    
      63package() {
    
      64  install -d "${pkgdir}/opt/yaqmc"
    
      65  cp -a "${srcdir}/pkg/opt/YAQMC/." "${pkgdir}/opt/yaqmc/"
    
      66
    
      67  install -d "${pkgdir}/usr/bin"
    
      68  ln -s /opt/yaqmc/yaqmc "${pkgdir}/usr/bin/yaqmc"
    
      69
    
      70  install -Dm644 "${srcdir}/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      71
    
      72  install -Dm644 "${srcdir}/pkg/usr/share/applications/org.yaqmc.desktop" \
    
      73    "${pkgdir}/usr/share/applications/org.yaqmc.desktop"
    
      74  sed -i 's|^Exec=.*|Exec=/opt/yaqmc/yaqmc %U|' \
    
      75    "${pkgdir}/usr/share/applications/org.yaqmc.desktop"
    
      76
    
      77  install -d "${pkgdir}/usr/share/icons"
    
      78  cp -a "${srcdir}/pkg/usr/share/icons/hicolor/." "${pkgdir}/usr/share/icons/hicolor/"
    
      79
    
      80  # Arch enables unprivileged user namespaces by default. Do not ship a setuid
    
      81  # chrome-sandbox; linux-hardened users should enable that kernel feature.
    
      82  chmod 0755 "${pkgdir}/opt/yaqmc/chrome-sandbox"
    
      83}
    
      84

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 07:17:15	Low	2