ytdesk-bin
The package repackages a prebuilt .deb from the project's official GitHub releases, which is normal for -bin packages; the source is verifiable and the build process is transparent, though the low vote count and recent upload give slight supply-chain concern.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package repackages a prebuilt .deb from the project's official GitHub releases, which is normal for -bin packages; the source is verifiable and the build process is transparent, though the low vote count and recent upload give slight supply-chain concern.
PKGBUILD
# Maintainer: opecko <https://github.com/opecko>
# AUR package: repackages the .deb from the GitHub release. Updated by scripts/aur.sh.
pkgname=ytdesk-bin
pkgver=2.0.0
pkgrel=1
pkgdesc="YouTube Music desktop client (prebuilt)"
url='https://github.com/opecko/ytdesk'
arch=('x86_64')
license=('MIT')
depends=('webkit2gtk-4.1' 'gtk3' 'libsoup3' 'dbus' 'gst-plugins-base' 'gst-plugins-good' 'gst-libav' 'libayatana-appindicator')
optdepends=('nodejs: JS runtime for the yt-dlp playback fallback'
'gnome-keyring: stores the login cookie (Secret Service)')
provides=('ytdesk')
conflicts=('ytdesk')
options=('!strip' '!debug')
source=("https://github.com/opecko/ytdesk/releases/download/v$pkgver/ytdesk_${pkgver}_amd64.deb"
"LICENSE-$pkgver::https://raw.githubusercontent.com/opecko/ytdesk/v$pkgver/LICENSE")
noextract=("ytdesk_${pkgver}_amd64.deb")
sha256sums=('2cb480da37f5a39fc346be5e9da0ce78a0dbd0e4a869886c206267cba30ce51e'
'd8246ddc68471e6f5d5eb2bc54b9fb5878d6c362a7d99df0dd8193ec48cbdcce')
prepare() {
bsdtar -xf "ytdesk_${pkgver}_amd64.deb" data.tar.gz
}
package() {
bsdtar -xf data.tar.gz -C "$pkgdir"
# Tauri names the 2x icon dir "256x256@2"; use the standard hicolor size dir.
if [ -d "$pkgdir/usr/share/icons/hicolor/256x256@2" ]; then
mkdir -p "$pkgdir/usr/share/icons/hicolor/256x256"
mv "$pkgdir/usr/share/icons/hicolor/256x256@2/apps" "$pkgdir/usr/share/icons/hicolor/256x256/"
rmdir "$pkgdir/usr/share/icons/hicolor/256x256@2"
fi
install -Dm644 "LICENSE-$pkgver" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
}
Changes since previous scan
--- PKGBUILD @ 2026-10-16 00:12+++ PKGBUILD @ 2026-10-17 00:21@@ -1,7 +1,7 @@ # Maintainer: opecko <https://github.com/opecko> # AUR package: repackages the .deb from the GitHub release. Updated by scripts/aur.sh. pkgname=ytdesk-bin-pkgver=1.3.0+pkgver=2.0.0 pkgrel=1 pkgdesc="YouTube Music desktop client (prebuilt)" url='https://github.com/opecko/ytdesk'@@ -16,7 +16,7 @@ source=("https://github.com/opecko/ytdesk/releases/download/v$pkgver/ytdesk_${pkgver}_amd64.deb" "LICENSE-$pkgver::https://raw.githubusercontent.com/opecko/ytdesk/v$pkgver/LICENSE") noextract=("ytdesk_${pkgver}_amd64.deb")-sha256sums=('2d4e7436ac023af27c5a0067bf9b6ee6e076a9bc0f411f1e166da6ef7acc1324'+sha256sums=('2cb480da37f5a39fc346be5e9da0ce78a0dbd0e4a869886c206267cba30ce51e' 'd8246ddc68471e6f5d5eb2bc54b9fb5878d6c362a7d99df0dd8193ec48cbdcce') prepare() {Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 21:16:13 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |
| 2026-10-12 19:14:29 | Low | 2 |
| 2026-10-12 00:18:51 | Low | 2 |
| 2026-10-11 13:10:50 | Low | 2 |