ymusic-cli-bin

LOW
maintainer zianzit 0 votes scanned 2026-10-17 19:19:13.554222
View on AUR
Why flagged

Package provides a prebuilt binary from a project fork's GitHub release, which is a normal AUR pattern; the binary is from a plausible project source, and the low votes/recent upload is a weak signal not indicating active malice.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): Package provides a prebuilt binary from a project fork's GitHub release, which is a normal AUR pattern; the binary is from a plausible project source, and the low votes/recent upload is a weak signal not indicating active malice.

PKGBUILD

1# Maintainer: Ivan Odnoorov <elcheshirecat at yandex dot ru>
2# Fork of https://github.com/Rexilone/yamusic-cli
3pkgname=ymusic-cli-bin
4_pkgname=ymusic-cli
5pkgver=1.0.0
6pkgrel=1
7pkgdesc="Terminal client for Yandex Music: My Wave, likes, stations (TUI); fork of https://github.com/Rexilone/yamusic-cli — prebuilt static binary"
8arch=('x86_64')
9url="https://github.com/iodnoorov/ymusic"
10license=('MIT')
11depends=('mpv')
12provides=("$_pkgname")
13conflicts=("$_pkgname")
14options=('!strip' '!debug')
15source=("$url/releases/download/v$pkgver/ymusic-$pkgver-x86_64-linux.tar.gz")
16sha256sums=('883eeb8cff46b37a5548c50539002dc1084cfb3e67a789aa7cef128f56d77e43')
17
18package() {
19 cd "ymusic-$pkgver-x86_64-linux"
20 install -Dm755 ymusic "$pkgdir/usr/bin/ymusic"
21 install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
22 install -Dm644 README.md "$pkgdir/usr/share/doc/$pkgname/README.md"
23}
24

Scan history

Scanned at (UTC)SeverityRules
2026-10-17 19:19:13 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion