ytdesk-bin

LOW
maintainer opecko14 0 votes scanned 2026-10-17 00:21:55.226236
View on AUR
Why flagged

The package repackages a prebuilt .deb from the project's official GitHub releases, which is normal for -bin packages; the source is verifiable and the build process is transparent, though the low vote count and recent upload give slight supply-chain concern.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package repackages a prebuilt .deb from the project's official GitHub releases, which is normal for -bin packages; the source is verifiable and the build process is transparent, though the low vote count and recent upload give slight supply-chain concern.

PKGBUILD

1# Maintainer: opecko <https://github.com/opecko>
2# AUR package: repackages the .deb from the GitHub release. Updated by scripts/aur.sh.
3pkgname=ytdesk-bin
4pkgver=2.0.0
5pkgrel=1
6pkgdesc="YouTube Music desktop client (prebuilt)"
7url='https://github.com/opecko/ytdesk'
8arch=('x86_64')
9license=('MIT')
10depends=('webkit2gtk-4.1' 'gtk3' 'libsoup3' 'dbus' 'gst-plugins-base' 'gst-plugins-good' 'gst-libav' 'libayatana-appindicator')
11optdepends=('nodejs: JS runtime for the yt-dlp playback fallback'
12 'gnome-keyring: stores the login cookie (Secret Service)')
13provides=('ytdesk')
14conflicts=('ytdesk')
15options=('!strip' '!debug')
16source=("https://github.com/opecko/ytdesk/releases/download/v$pkgver/ytdesk_${pkgver}_amd64.deb"
17 "LICENSE-$pkgver::https://raw.githubusercontent.com/opecko/ytdesk/v$pkgver/LICENSE")
18noextract=("ytdesk_${pkgver}_amd64.deb")
19sha256sums=('2cb480da37f5a39fc346be5e9da0ce78a0dbd0e4a869886c206267cba30ce51e'
20 'd8246ddc68471e6f5d5eb2bc54b9fb5878d6c362a7d99df0dd8193ec48cbdcce')
21
22prepare() {
23 bsdtar -xf "ytdesk_${pkgver}_amd64.deb" data.tar.gz
24}
25
26package() {
27 bsdtar -xf data.tar.gz -C "$pkgdir"
28 # Tauri names the 2x icon dir "256x256@2"; use the standard hicolor size dir.
29 if [ -d "$pkgdir/usr/share/icons/hicolor/256x256@2" ]; then
30 mkdir -p "$pkgdir/usr/share/icons/hicolor/256x256"
31 mv "$pkgdir/usr/share/icons/hicolor/256x256@2/apps" "$pkgdir/usr/share/icons/hicolor/256x256/"
32 rmdir "$pkgdir/usr/share/icons/hicolor/256x256@2"
33 fi
34 install -Dm644 "LICENSE-$pkgver" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
35}
36

Changes since previous scan

--- PKGBUILD @ 2026-10-16 00:12
+++ PKGBUILD @ 2026-10-17 00:21
@@ -1,7 +1,7 @@
# Maintainer: opecko <https://github.com/opecko>
# AUR package: repackages the .deb from the GitHub release. Updated by scripts/aur.sh.
pkgname=ytdesk-bin
-pkgver=1.3.0
+pkgver=2.0.0
pkgrel=1
pkgdesc="YouTube Music desktop client (prebuilt)"
url='https://github.com/opecko/ytdesk'
@@ -16,7 +16,7 @@
source=("https://github.com/opecko/ytdesk/releases/download/v$pkgver/ytdesk_${pkgver}_amd64.deb"
"LICENSE-$pkgver::https://raw.githubusercontent.com/opecko/ytdesk/v$pkgver/LICENSE")
noextract=("ytdesk_${pkgver}_amd64.deb")
-sha256sums=('2d4e7436ac023af27c5a0067bf9b6ee6e076a9bc0f411f1e166da6ef7acc1324'
+sha256sums=('2cb480da37f5a39fc346be5e9da0ce78a0dbd0e4a869886c206267cba30ce51e'
'd8246ddc68471e6f5d5eb2bc54b9fb5878d6c362a7d99df0dd8193ec48cbdcce')
prepare() {

Scan history

Scanned at (UTC)SeverityRules
2026-10-17 00:21:55 Low 2
2026-10-16 21:16:13 Low 2
2026-10-16 00:12:47 Low 2
2026-10-15 00:28:05 Low 2
2026-10-14 00:06:47 Low 2
2026-10-13 00:23:45 Low 2
2026-10-12 19:14:29 Low 2
2026-10-12 00:18:51 Low 2
2026-10-11 13:10:50 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion