Just downloaded source and built this to play around with it. I was a bit surprised that the first thing it did when I ran it was to start downloading binaries from the internet. It went off to fetch FFMpeg from some remote server, but I already have FFMpeg installed. Then it tried and failed to install its own Python interpreter, which is another thing that's already present on the system.<p>How come this is trying to install its own vendored dependencies, including executable binaries, instead of checking for what's already installed? That approach can lead to both security and performance issues.<p>Edit: the Python <i>download</i> isn't failing, but rather the application itself is looking for the executable interpreter in `lib` rather than `bin` once the download completes. I built the release tarball in the git repo, and I'm pretty amazed that such a basic error could make it into release code.<p>Further edit: I tried using the build script in the tarball rather than just doing a `cargo build -r`, and it started trying to install Docker containers! Docker to build a desktop application! What is going on here?
> instead of checking for what's already installed<p>Plenty of software come with their own Python runtime. Even Blender uses its own Python runtime. I can name so many apps with embedded Python runtime: Blender, Houdini, Bitwig, Substance Painter, Krita, etc. Checking for what's already installed isn't the norm. In Krita's case, it uses installed Python to build it... and in the building process it builds another Python runtime for its own!<p>This app should have probably bundled the runtime instead of downloading a new one though.<p>> install its own vendored dependencies<p>> lead to both security and performance issues<p>npm install and pip -r theoretically have the same kind of security issue. How many projects on github run this kind of command during build process? My guess is in the order of millions.
This is unfortunately becoming more common.<p>Just yesterday, I went to try out some cool new AI thing that was here on the front page of HN. It's written in Python. Great, I thought, that means I can put it into a virtualenv and just rm the whole tree when I'm done and my system will be exactly in the same state it was previously.<p>But sadly... no... the first time I ran it, this Python program started downloading and installing Node/NPM, and all kinds of other stuff to my machine WITHOUT even asking for permission. Sorry app developers, but my machine and my home directory are my workplace. They are curated property, you are NOT allowed to just install whatever you wish.<p>I expect this kind of behavior from programs whose only supported installation method is a curlpipe. (And I do avoid those.) I do not expect it from programs that claim to be installable by pip, or ship their own binaries. These NEED to be called out as vulnerable to supply-chain attacks at worst and extremely disrepectful to users at best.
> How come this is trying to install its own vendored dependencies, including executable binaries, instead of checking for what's already installed? That approach can lead to both security and performance issues.<p>I've been sympathetic to your viewpoint, and I can see why this kind of thing is becoming more common.<p>The idea that users can reliably supply their own vendor libs/execs for applications is a bit of a fantasy. Devs working on fixing issues caused by the user having a strange issue due to the version of Python or whatever that they have installed is largely a waste of time when the application can "simply" ship with the exact dependencies it expects. This is especially true when it comes to open source work. Dealing with weird edge cases because the user has a version of FFMPEG installed that, for whatever reason, is missing h264, is work that nobody asked for. Given that the audience of this kind of app is a general one (not specific at all to devs) then it doesn't make sense to require other system packages to be present; if things like Python and FFMPEG are not required and will be downloaded anyway as part of the app install process, then there's no point in not <i>always doing that</i>. If you think about it, it's hardly different from any other sort of software dependency. The dependencies are just relatively bigger.<p>Personally, I have no desire for my applications to use other executables on my system unless I request that they do so explicitly. I'm sympathetic to the idea from a mere efficiency perspective, especially when it comes to developer tooling. But a karaoke app? No offense, but why care? A Python interpreter will be anywhere between 50 and 200 megabytes. FFMPEG is even smaller, especially if you don't enable every single feature and codec. Compared to how ridiculously bloated your average basic mobile app is (without anything like a built in JIT), bundling a desktop application with something like Python provides a lot of power relative to the number of bytes added.
>How come this is trying to install its own vendored dependencies, including executable binaries, instead of checking for what's already installed? That approach can lead to both security and performance issues.<p>Because the person who vibecoded this had no idea they should have been doing that.
It’s a desktop app for mostly non-technical users, so bundling the runtime is a deliberate tradeoff to reduce setup friction and machine-specific breakage.<p>That said, an optional “use system environment if available” mode could make sense for advanced users. A PR for that would be welcome, as long as it also handles the real complexity involved: platform differences, Python package compatibility, GPU backends, and missing system/compiler flags.
> It’s a desktop app for mostly non-technical users, so bundling the runtime is a deliberate tradeoff to reduce setup friction and machine-specific breakage.<p>That's not a very reasonable justification, considering that dynamic linking of dependencies has been industry standard in software designed for "non-technical users" for the past thirty years or so, and is basically a solved problem.<p>I can understand having a downloadable archive that already includes things like FFMpeg and Python for <i>Windows</i> users (with everything already included in appropriate locations, so no runtime downloads necessary).<p>But this is an <i>especially</i> bad practice for Linux, since most of the vendored dependencies are already installed by default on pretty much every Linux distro, and package managers are designed to sort out and install appropriate dependencies on behalf users, so that the "non-technical" among them aren't exposed to the massive risks of having application software retrieve and execute arbitrary binaries from the internet.<p>The only thing it somewhat makes sense for would be the AI models it's retrieving, but even that ought to be implemented via a separate download/update script and not just baked into the main application runtime without even prompting the user that it's about to download a huge dataset.<p>> A PR for that would be welcome, as long as it also handles the real complexity involved: platform differences, Python package compatibility, GPU backends, and missing system/compiler flags.<p>These are the sort of things that config scripts at build time are designed to handle. It's already using Cargo here, which should be able to handle all of this just fine, so it's very perplexing to see that it isn't being used for this purpose, and what should be build-time dependency resolution is instead being palmed off to the application itself at runtime. That is an extremely strange -- and potentially dangerous -- approach.
> dynamic linking of dependencies has been industry standard<p>So it has, and I've been hating the excess complexity it brings for most of that thirty years! I'm glad to see the recent swing back toward self-contained executables. Where this author went wrong was not in vendoring the app's exact dependencies, which is a good idea, but in trying to download them and install them separately on first launch, rather than including them in the app bundle, where they can remain isolated from the rest of the system.
> So it has, and I've been hating the excess complexity it brings for most of that thirty years!<p>It reduces complexity compared to the administrative and security mess of every application having its own version of every library, let alone its own version of external tools and interpreters.<p>> I'm glad to see the recent swing back toward self-contained executables.<p>I wish there was one. Static linking is a great solution for this. Instead, we're seeing dynamically linked libraries being bundled alongside of executables in a way that increases complexity vastly.<p>> Where this author went wrong was not in vendoring the app's exact dependencies, which is a good idea, but in trying to download them and install them separately on first launch, rather than including them in the app bundle, where they can remain isolated from the rest of the system.<p>Agreed. Dependency resolution at build time is normal. Dependency resolution in user mode at runtime is crazy.
Such a setting will cause more headaches for the developer since it explodes their support matrix. Supporting a single version of dependencies and shipping those is a much more scalable solution for delivering high quality software.
Quite the opposite, in fact: if the app gains popularity that people start looking to build and package it for their respective OSes or distribution channels, the author will be inundated with support requests on account of doing dependency management in such an unusual and risky way.<p>"Normal" users wouldn't even encounter anything here, as they'd just install prebuilt binary packages with all of the dependencies already sorted out. As things stand, the application trying to install its own dependencies at runtime is creating a whole new class of user-facing issues to generate escalations (such as the app's failure to locate the Python interpreter it itself had just installed).
hey both!<p>thanks for your feedback and reports, I'd be happy if they are added as issues on github.<p>as said in the separate comment, I really wanted an app to be as "grandma-proof" as possible, therefore I really wanted to have one binary that does the magic for you. it's a karaoke app, not a tool that is aimed at engineers.<p>we can indeed look at the local packages before downloading an executable, it's just not done yet but might be added in the future.<p>I've built this project out of passion and it's 100% open-source and free, so please keep this in mind when criticizing.
> I really wanted an app to be as "grandma-proof" as possible, therefore I really wanted to have one binary that does the magic for you.<p>Probably the best way to do that is to design, build, and distribute it like any other normal desktop application, and not come up with idiosyncratic and experimental methods for invoking bog-standard libraries and language interpreters.<p>On Windows, just include the necessary binaries as part of the application distribution itself, in hardcoded paths, without any runtime download of executables from unclear sources.<p>On Linux, use system defaults resolved at build time through a normal config script -- any "grandma users" on Linux will end up installing from distro repos, AppImage, Flatpak, etc, all of which have their own methods for handling dependencies, and is definitely not something the application should be trying to do by itself post-install.
noted, mate, and thanks for the feedback, really!<p>I'm not experienced in building desktop apps per-se, so I went with the thing that looked reasonable to me. all your comments are valid tho. I'll take a look how can I resolve this in the future.<p>cheers!
While I can understand that, why not replace python deps with wasm versions ?
Personal attacks directed at people who build OSS are not cool, even if you take issue with their supposed use of AI or vendoring of dependencies.
I'm just using cross <a href="https://github.com/cross-rs/cross" rel="nofollow">https://github.com/cross-rs/cross</a> to build cross-arch. you can still use `cargo build`, it will just work.
welcome to the millenial way of doing things<p>always assumes internet is connected<p>always assumes everything is trusted
I've been working on a karaoke app called Nightingale. You point it at your music folder and it turns your songs into karaoke - separates vocals from instrumentals, generates word-level synced lyrics, and lets you sing with highlighted lyrics and pitch scoring. Works with video files too.<p>Everything runs locally on your machine, nothing gets uploaded. No accounts, no subscriptions, no telemetry.<p>It ships as a single binary for Linux, macOS, and Windows. On first launch it sets up its own isolated Python environment and downloads the ML models it needs - no manual installation of dependencies required.<p>My two biggest drivers for the creation of this were:<p><pre><code> The lack of karaoke coverage for niche, avant-garde, and local tracks.
Nostalgia for the good old cheesy karaoke backgrounds with flowing rivers, city panoramas, etc.
</code></pre>
Some highlights:<p><pre><code> Stem separation using the UVR Karaoke model (preserves backing vocals) or Demucs
Automatic lyrics via WhisperX transcription, or fetched from LRCLIB when available
Pitch scoring with player profiles and scoreboards
Gamepad support and TV-friendly UI scaling for party setups
GPU acceleration on NVIDIA (CUDA) and Apple Silicon (CoreML/MPS)
Built with Rust and the Bevy engine
</code></pre>
The whole stack is open source. No premium tier, no "open core" - just the app.<p>Feedback and contributions welcome.
Just tried it with <i>B.E.D - Walk Away</i>[0], unfortunately it lost track of the lyrics after 30 secs (Model is "large-v3"). Will play around a bit more, as it would be great to have a working karaoke generator.<p>Some quick feedback:<p><pre><code> - Needs a way to skip for-/backwards during playback to validate the result
- Sentences seem to be recognized (first letter has uppercasing), but periods aren't added
- Needs an option to edit results from the track analysis
</code></pre>
Thanks for keeping it FOSS!<p>[0]: <a href="https://www.youtube.com/watch?v=_MFT4H3VoNE" rel="nofollow">https://www.youtube.com/watch?v=_MFT4H3VoNE</a>
Periods in song lyrics?
hey mate! thanks for your feedback.<p>indeed, I'm running to two problems on the analyzer side:
1. align model sliding off (especially w/ chorus/back vocals present)
2. transcript skipping parts of lyrics in lyrics-heavy tracks (I tried a lot of russian rap, lol)<p>happy for contributions as I'm not that experienced w/ machine learning side of the project, mostly it was emperical "tweak the parameters and look what is changed"
Amazing work! I am thrilled someone was motivated to approach this problem and develop a creative solution like this. There are very limited options for Karaoke, especially in the FOSS space. Most Karaoke apps are super limited and that's driven many Karaoke enjoyers I know to YouTube in search of the songs they want to sing. This solution would give them the power to do even more songs, even better than what's out there now!<p>Questions for you:<p>1. What CUDA capability level is necessary for Nvidia GPU accelleration to work?<p>3. Are there any plans to support iGPU/NPU accelleration on AMD and Intel? Asking because those chips are most common in the mini computers sold at low cost these days.<p>My family members who love Karaoke and will be happy to try this. Looking forward to it!
I just want to say how much I love that you used Dean Blunt in the example video
Excited to try this out. How well does WhisperX deal with lyrics in say Mandarin or Cantonese? Does it output Hanzi?
I haven't tried Mandarin and Cantonese, but tried Japanese. back at that time, it performed poorly. however, I've tweaked a bunch of settings since then, so maybe it has changed. Hanzi is a supported font and can be output, but the transcript/alignment quality might not be the best
Struggled somewhat with <i>Tjamuku Ngurra</i> by the Tjintu Desert Band, absolutely nailed Mariah Carey's <i>Ken Lee</i>.
This looks like awesome awesome fun! Will let you know how it runs. What a wonderful idea <3
Just tried No_4mat's 1992... unfortunately it didn't work :(
This gave me a blast to the past to Nightingale, the media player built on top of Firefox. It was a Firefox fork that was aiming to be a more powerful alternative to iTunes/Winamp. But since it was built on Firefox, you could also use it as an all-in-one media player and web browser.<p>The homepage still exists, but it looks like many of the other pages like the blog and wiki are long gone. It hasn't been active in probably over a decade.<p><a href="https://getnightingale.com/" rel="nofollow">https://getnightingale.com/</a>
Open source, local and passion driven. The kind of news that make me believes in humanity again. Thank you, can't wait to try it this week-end !
Really nice project, I'm looking forward to trying it!<p>Would it be possible to process songs on one device, and then use the result in another, or even multiple? Or would it be possible to run as separate server / client?<p>I ask mainly because the device I connect to my TV is definitely not the most powerful one, so it would be nice if I can preprocess the songs elsewhere.
Nice work! If you are looking for ways to enhance this or complementary routes, one thing I was thinking about recently... As a musician, often I play songs I don't know the lyrics to. It would be cool to have an app that could follow along karaoke style with the words, as I sing and as the band plays. Right now I clip a phone to the mic stand, but after a lyric or two, I lose my place. This is probably multitudes more complex based on every "band/vocals" sounding different, but just something I was thinking about.
This looks great, but I don't understand what it's supposed to do. I assumed the idea was "remove the lyrics" but of the 5 songs I tried (from Cry Cry Cry, Indigo Girls, and Suzanne Vega), none seemed to have any change from the original at all - it's showing the words on the screen (and the timing is perfect) but it's not removing the singing at all. How do you turn off the singing?
hey!<p>you can use + / - buttons on the keyboard to change the level of guidance according to your preference, generally there is a controls legend in the top right corner<p><a href="https://nightingale.cafe/docs/controls" rel="nofollow">https://nightingale.cafe/docs/controls</a>
Very nice!<p>I've worked on a small toy project with a similar purpose in the past [1], though it's not nearly as polished as yours, and I've made some questionable decisions here and there.<p>I have questions about pitch tracking. It seems you do track the pitch for scoring, and there's a line at the top of the screen that seems related but that I can't figure out. For my use case, an important feature of karaoke apps is displaying how "high" the next note should be sung, or at least some hints. Is it something your app can do and I just haven't figured it out? Or would it be a feature request?<p>[1] <a href="https://github.com/eckter/karaoke_helper" rel="nofollow">https://github.com/eckter/karaoke_helper</a>
This app is really amazing, congrats!!!
Big karaoke fan, so thanks for doing this. I'm processing a first test song as I write. The pitch scoring sounds really interesting as both a competitive and maybe also a training tool.<p>A couple of immediate small pieces of feedback:<p>* The colour scheme on the queue/nn% buttons is really low contrast - white on pale yellow is very hard to read<p>* the 'models' button (bottom left) - I assumed this would give me details about which models are available, and the sizes, but instead deleted the downloaded models without warning. Maybe add a 'are you sure you want to...' check?
Processed Kenny Rogers' The Gambler perfectly - took out the lead vocal but left the backing vocals.
hey, thanks for the feedback, both noted!
My wife is a huge karaoke fan. I'm especially interested in the pitch scoring since we usually play the karaoke games on older consoles for that exact feature. Nobody really makes games like that anymore without a subscription (and most of these good modern karaoke platforms are exclusive to east asia anyways). If this works well this could make for some really fun social events, looking forward to trying this.
I don’t want to take away from OPs project (which seems really nice) but have you tried Ultrastar Deluxe ( <a href="https://usdx.eu/" rel="nofollow">https://usdx.eu/</a> ) in combination with USDB ( <a href="https://usdb.animux.de/" rel="nofollow">https://usdb.animux.de/</a> )?<p>There’s also a program for automatically downloading the songs: <a href="https://github.com/bohning/usdb_syncer" rel="nofollow">https://github.com/bohning/usdb_syncer</a>
What would you consider the best "Singstar-like" alternative atm?
please try it out and share your feedback afterwards!<p>both transcript/alignment might not work perfectly, but it really depends on the song
I would like the option to put the original music video as the background, like you can in Ultrastar
Looks amazing. I've been using Karafun [1], a paid service, but this seems promising.<p>[1] <a href="https://www.karafun.com/" rel="nofollow">https://www.karafun.com/</a>
Unfortunately karafun, like so many other systems, has egregious holes in its catalog. I hate playing the “this song? No… this song? No… this song? No…” game.
Psst... if you sign up to their Premium tier you can play songs from their "Community" (i.e. user uploaded songs). If you sign up to the "Pro" tier, you can play even more songs that are normally locked from their catalogue (but you'll have to manage rightsholders authorization yourself).
Karafun is a paid service? I've seen their karaoke songs on Youtube for over a decade, I thought that was their business model.
Yes, the free songs on YouTube aren't customizable: there's a low voice guide that you can't turn off (or turn up...), and you can't change tempo.<p>You can do this from their huge catalog of songs, using their official app or their web client: <a href="https://www.karafun.com/web/" rel="nofollow">https://www.karafun.com/web/</a><p>Plus, they have music quizzes you can play with many people using smartphones as remote controls. It's super fun for parties where people don't want to sing all the time.
>app that works with any song on your computer<p>Impressive, very nice. Now let's see my death metal collection.<p>Just joking! Very nice, thanks for open-sourcing it.
No joke, feel free to try it! The beauty of the approach is that you don't have any limitations. Just be prepared to degraded experience, sometimes models struggle even with the simplest pop tracks :D
I am getting a virus detected error when downloading from Chrome.
This looks amazing! looking forward to test it on the weekend. Does it work well on a raspberry pi with 4 gigs of ram?
This is just for English language? I have some older Japanese stuff I would love to sing!
so, as answered in one of the other threads - for me the transcript model performed poorly back in the days, however since then I've added lyrics lookup and tweaked a bunch of parameters, so it is worth trying!
Cool, but on Firefox no lyrics are displayed on the website's demo.
I haven't tried this but I would be very sceptical about the transcription of lyrics. Is there some way to correct errors?
So cool! I'll try it with the steam deck. Being able to go to a party with just the deck and a microphone and have a karaoke with any song people want sounds good.
This is very cool. I couldn't find it it already supports duets. I assume it won't.
VirusTotal says the .EXE is flagged by 1 security vendor but threat is low
I hate to be that guy that points out other projects but YARG has vocals and there are a <i>slew</i> of songs that can be used.<p><a href="https://www.yarg.in" rel="nofollow">https://www.yarg.in</a><p><a href="https://www.enchor.us/?&hasVocals=true" rel="nofollow">https://www.enchor.us/?&hasVocals=true</a>
i'm at the homepage of this project and i like it! will give it a try at the weekend - as a family we LOVE karaoke!
I think you nailed it. Does it support pitch/tempo controls?
This is great! I thought of doing something like this for Karaoke, but was wondering about the copyright implications of doing it server-side.<p>We already do this for ingesting podcasts and cutting their clips with text being highlighted as people speak. AssemblyAI also supports speaker diarization.<p>For videos recorded using our own livestreaming studio, we can bypass all this by using Web STT and TTS APIs resulting in perfect timing and diarization without the need for server side models.
I just realized a couple weeks ago that the Japanese invented karaoke.
virus detected
[flagged]
[dead]
[flagged]
this is more nuanced than the title suggests. worth reading the whole thing
> <i>separates vocals, transcribes lyrics</i><p>ML has come a long way but I have yet to encounter anything that does this reliably with speech, never mind song lyrics.<p>> <i>works with any song on your computer</i><p>I'd be shocked if this is true.