ymusic-cli-bin
Package provides a prebuilt binary from a project fork's GitHub release, which is a normal AUR pattern; the binary is from a plausible project source, and the low votes/recent upload is a weak signal not indicating active malice.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): Package provides a prebuilt binary from a project fork's GitHub release, which is a normal AUR pattern; the binary is from a plausible project source, and the low votes/recent upload is a weak signal not indicating active malice.
PKGBUILD
# Maintainer: Ivan Odnoorov <elcheshirecat at yandex dot ru>
# Fork of https://github.com/Rexilone/yamusic-cli
pkgname=ymusic-cli-bin
_pkgname=ymusic-cli
pkgver=1.0.0
pkgrel=1
pkgdesc="Terminal client for Yandex Music: My Wave, likes, stations (TUI); fork of https://github.com/Rexilone/yamusic-cli — prebuilt static binary"
arch=('x86_64')
url="https://github.com/iodnoorov/ymusic"
license=('MIT')
depends=('mpv')
provides=("$_pkgname")
conflicts=("$_pkgname")
options=('!strip' '!debug')
source=("$url/releases/download/v$pkgver/ymusic-$pkgver-x86_64-linux.tar.gz")
sha256sums=('883eeb8cff46b37a5548c50539002dc1084cfb3e67a789aa7cef128f56d77e43')
package() {
cd "ymusic-$pkgver-x86_64-linux"
install -Dm755 ymusic "$pkgdir/usr/bin/ymusic"
install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
install -Dm644 README.md "$pkgdir/usr/share/doc/$pkgname/README.md"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-17 19:19:13 | Low | 2 |