yunting

LOW

maintainer ilovesusu 0 votes scanned 2026-10-29 07:52:02.761978

View on AUR

Why flagged

Package builds from a git source that defaults to a trusted project-owned GitHub repository, with a SKIP'd checksum only for convenience during development; the code is openly auditable and the build process is standard for AUR, posing no inherent security risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): Package builds from a git source that defaults to a trusted project-owned GitHub repository, with a SKIP'd checksum only for convenience during development; the code is openly auditable and the build process is standard for AUR, posing no inherent security risk.

PKGBUILD

      1# Maintainer: sudoskys <tururu02 at gmail dot com>
    
      2# Contributor: ilovesusu (Joy Jasper) <0x73757375@gmail.com>
    
      3# 云听的发行版包：按 pkgver 取对应的 git 标签构建，只装发布过的版本。发版时把 pkgver 改成新版本号。
    
      4# 不在 AUR 上：用户按 README「安装」克隆仓库后在这里 makepkg -si。
    
      5# 本地试打包这个仓库（标签要已存在）：
    
      6#   YUNTING_REPO="git+file://$(git rev-parse --show-toplevel)" makepkg -si
    
      7pkgname=yunting
    
      8pkgver=0.6.30
    
      9pkgrel=1
    
      10pkgdesc='Native KDE client for NetEase Cloud Music (Qt 6 / Kirigami)'
    
      11arch=(x86_64 aarch64)
    
      12url='https://github.com/nephelesound/yunting'
    
      13license=('GPL-3.0-or-later' 'MIT' 'Apache-2.0')   # MIT：应用图标（Microsoft Fluent Emoji），见 data/ICON-LICENSE；
    
      14                                                   # Apache-2.0：编进程序的 Material Color Utilities（src/third_party/）
    
      15depends=(
    
      16  qt6-base qt6-declarative mpvqt mpv
    
      17  kirigami kirigami-addons kcoreaddons kdbusaddons kwindowsystem ki18n kcolorscheme kconfig kstatusnotifieritem prison
    
      18  qtkeychain-qt6 openssl fontconfig
    
      19  layer-shell-qt   # Wayland 下桌面歌词置顶
    
      20  zstd
    
      21)
    
      22makedepends=(cmake ninja git)
    
      23conflicts=(yunting-git)   # 以前从主干构建的包；装这个时 pacman 会提示替换
    
      24# 系统 makepkg.conf 默认开 debug：会把剥过符号的二进制挪进 -debug 子包，主包变空
    
      25options=(!debug)
    
      26source=("$pkgname::${YUNTING_REPO:-git+https://github.com/nephelesound/yunting.git}#tag=v$pkgver")
    
      27sha256sums=(SKIP)
    
      28
    
      29build() {
    
      30  cmake -S "$pkgname/src" -B build -G Ninja \
    
      31    -DCMAKE_BUILD_TYPE=None \
    
      32    -DCMAKE_INSTALL_PREFIX=/usr
    
      33  cmake --build build
    
      34}
    
      35
    
      36check() {
    
      37  # 打包检查不连构建者的桌面：断开会话总线，要对着真实 Plasma 测的（抑制睡眠）自己跳过。
    
      38  # 否则桌面门户一时异常（例如后端没起来）就装不上
    
      39  DBUS_SESSION_BUS_ADDRESS=unix:path=/nonexistent ctest --test-dir build --output-on-failure
    
      40}
    
      41
    
      42package() {
    
      43  DESTDIR="$pkgdir" cmake --install build
    
      44}
    
      45

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-29 07:52:02	Low	2