billGate48 [1] filed a deletion request for vital-synth [2]:
maintainer is self hosting a file
source_x86_64=("${pkgname}-${pkgver}-${pkgrel}.deb::https://github.com/bonecountysheriff/${pkgname_deb}/releases/download/${pkgver}/${pkgname_deb}.deb")
that is not the same file as they claim it to be
https://account.vital.audio/ (you'd need to make an account to verify)
sha512sum gives different results for the 2 different files. If this
isn't against the arch package guidelines, it fucking should be
[1] https://aur.archlinux.org/account/billGate48/
[2] https://aur.archlinux.org/pkgbase/vital-synth/