blender-3.6-lts-bin

LOW

maintainer twilight0 0 votes scanned 2026-10-26 13:48:15.774085

View on AUR

Why flagged

The prebuilt binary is downloaded directly from download.blender.org (Blender's official release infrastructure) with a verified sha256 checksum, and the bundled shell wrapper script also has a checksum; no unverifiable or swappable sources are present.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 85%): The prebuilt binary is downloaded directly from download.blender.org (Blender's official release infrastructure) with a verified sha256 checksum, and the bundled shell wrapper script also has a checksum; no unverifiable or swappable sources are present.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:33 "https://download.blender.org/release/Blender3.6/blender-${pkgver}-linux-x64.tar.xz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Twilight0 <twilight0@vivaldi.net>
    
      2pkgname=blender-3.6-lts-bin
    
      3pkgver=3.6.23
    
      4pkgrel=1
    
      5pkgdesc="A fully integrated 3D graphics creation suite (official 3.6 LTS precompiled binary release)"
    
      6arch=('x86_64')
    
      7url="https://www.blender.org"
    
      8license=('GPL-3.0-or-later')
    
      9options=('!strip' '!debug')
    
      10depends=(
    
      11  'desktop-file-utils'
    
      12  'hicolor-icon-theme'
    
      13  'libglvnd'
    
      14  'libice'
    
      15  'libsm'
    
      16  'libx11'
    
      17  'libxext'
    
      18  'libxfixes'
    
      19  'libxi'
    
      20  'libxkbcommon'
    
      21  'libxrender'
    
      22  'shared-mime-info'
    
      23)
    
      24optdepends=(
    
      25  'cuda: Cycles renderer CUDA support'
    
      26  'hip-runtime-amd: HIP renderer AMD support'
    
      27  'intel-compute-runtime: Cycles renderer Intel OneAPI support'
    
      28  'libdecor: Wayland client-side decorations support'
    
      29)
    
      30provides=('blender=3.6.23' 'blender-3.6' 'blender-lts')
    
      31conflicts=('blender')
    
      32source=(
    
      33  "https://download.blender.org/release/Blender3.6/blender-${pkgver}-linux-x64.tar.xz"
    
      34  "blender-3.6.sh"
    
      35)
    
      36sha256sums=(
    
      37  '0e9a18af4d0060b825e9617e24a775f759e0f9f67271c062f3d53a539030af00'
    
      38  'dd96be4195791988c888a369df41d5c2388836e236bc43ebda9d91a2fdaafad4'
    
      39)
    
      40
    
      41package() {
    
      42  local _src="blender-${pkgver}-linux-x64"
    
      43  cd "$srcdir/$_src"
    
      44
    
      45  local _opt_dir="${pkgdir}/opt/blender-3.6-lts"
    
      46  install -dm755 "$_opt_dir"
    
      47
    
      48  # Copy precompiled blender tree to /opt/blender-3.6-lts
    
      49  cp -a * "$_opt_dir/"
    
      50
    
      51  # Ensure bundled libraries have executable permissions
    
      52  if [ -d "$_opt_dir/lib" ]; then
    
      53    chmod -R 755 "$_opt_dir/lib"
    
      54  fi
    
      55
    
      56  # Binary wrapper and symlinks
    
      57  install -Dm755 "${srcdir}/blender-3.6.sh" "${pkgdir}/usr/bin/blender-3.6"
    
      58  install -dm755 "${pkgdir}/usr/bin"
    
      59  ln -sf blender-3.6 "${pkgdir}/usr/bin/blender"
    
      60  ln -sf /opt/blender-3.6-lts/blender-thumbnailer "${pkgdir}/usr/bin/blender-3.6-thumbnailer"
    
      61  ln -sf blender-3.6-thumbnailer "${pkgdir}/usr/bin/blender-thumbnailer"
    
      62
    
      63  # Desktop integration
    
      64  install -dm755 "${pkgdir}/usr/share/applications"
    
      65  sed \
    
      66    -e 's|^Exec=blender %f|Exec=blender-3.6 %f|' \
    
      67    -e 's|^Name=Blender$|Name=Blender 3.6 LTS|' \
    
      68    -e 's|^Icon=blender$|Icon=blender-3.6|' \
    
      69    blender.desktop > "${pkgdir}/usr/share/applications/blender-3.6.desktop"
    
      70  ln -sf blender-3.6.desktop "${pkgdir}/usr/share/applications/blender.desktop"
    
      71
    
      72  # Icons
    
      73  install -Dm644 blender.svg "${pkgdir}/usr/share/icons/hicolor/scalable/apps/blender-3.6.svg"
    
      74  ln -sf blender-3.6.svg "${pkgdir}/usr/share/icons/hicolor/scalable/apps/blender.svg"
    
      75  if [ -f blender-symbolic.svg ]; then
    
      76    install -Dm644 blender-symbolic.svg "${pkgdir}/usr/share/icons/hicolor/symbolic/apps/blender-3.6-symbolic.svg"
    
      77    ln -sf blender-3.6-symbolic.svg "${pkgdir}/usr/share/icons/hicolor/symbolic/apps/blender-symbolic.svg"
    
      78  fi
    
      79
    
      80  # Thumbnailer
    
      81  install -dm755 "${pkgdir}/usr/share/thumbnailers"
    
      82  cat << 'EOF' > "${pkgdir}/usr/share/thumbnailers/blender-3.6.thumbnailer"
    
      83[Thumbnailer Entry]
    
      84TryExec=blender-3.6-thumbnailer
    
      85Exec=blender-3.6-thumbnailer %u %o
    
      86MimeType=application/x-blender;
    
      87EOF
    
      88  ln -sf blender-3.6.thumbnailer "${pkgdir}/usr/share/thumbnailers/blender.thumbnailer"
    
      89
    
      90  # Licenses & documentation
    
      91  install -dm755 "${pkgdir}/usr/share/licenses/${pkgname}"
    
      92  if [ -d license ]; then
    
      93    cp -a license/* "${pkgdir}/usr/share/licenses/${pkgname}/" 2>/dev/null || true
    
      94  fi
    
      95  if [ -f copyright.txt ]; then
    
      96    install -Dm644 copyright.txt "${pkgdir}/usr/share/licenses/${pkgname}/copyright.txt" 2>/dev/null || true
    
      97  fi
    
      98}
    
      99

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-26 13:48:15	Low	3
2026-10-26 13:45:05	Medium	2