MarsSeed [1] filed a deletion request for ytmenu-git [2]:

Badly packaged, seemingly hobby project.

Runs curl inside package() to download a source file script that is
already downloaded from declared git repo.

Short-term effort project, from Feb to April 2022, plus one arbitrary
commit in Jun 2022. [a]

The ytmenu shell script has an option to update itself during runtime,
upon which it silently executes curl to fetch the latest commit
version of the script and send it to STDOUT, but that gets redirected
to a shell variable. It uses the following URL:

https://raw.githubusercontent.com/DemonKingSwarn/ytmenu/main/ytmenu

The script then tries to use the patch command to update the contents
of ytmenu shell script file that is currently running, with the source
that is stored in the shell variable.

Btw the package does not declare depends and makedepends for curl, nor
depens for patch.

(curl is not part of 'base'. It is a dependency of pacman, but pacman
in theory could change it at any time in the future. And patch is only
part of base-devel, not base.)

There are so many grievous errors here that I don't have any
confidence in author's code.

There are proper alternatives to play and/or download videos via CLI.

[a]: https://github.com/DemonKingSwarn/ytmenu/commits/main

[1] https://aur.archlinux.org/account/MarsSeed/
[2] https://aur.archlinux.org/pkgbase/ytmenu-git/

Reply via email to