blender-4.5-lts-bin

LOW
maintainer twilight0 0 votes scanned 2026-10-26 11:47:16.095995
View on AUR
Why flagged

The prebuilt binary is downloaded directly from download.blender.org (Blender's official release infrastructure) with a sha256 checksum, and the bundled blender-4.5.sh wrapper script is a local file with its own checksum; no unverifiable third-party hosts or obfuscated payloads are present.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 80%): The prebuilt binary is downloaded directly from download.blender.org (Blender's official release infrastructure) with a sha256 checksum, and the bundled blender-4.5.sh wrapper script is a local file with its own checksum; no unverifiable third-party hosts or obfuscated payloads are present.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:32 "https://download.blender.org/release/Blender4.5/blender-${pkgver}-linux-x64.tar.xz"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Twilight0 <twilight0@vivaldi.net>
2pkgname=blender-4.5-lts-bin
3pkgver=4.5.15
4pkgrel=1
5pkgdesc="A fully integrated 3D graphics creation suite (official 4.5 LTS precompiled binary release)"
6arch=('x86_64')
7url="https://www.blender.org"
8license=('GPL-3.0-or-later')
9depends=(
10 'desktop-file-utils'
11 'hicolor-icon-theme'
12 'libglvnd'
13 'libice'
14 'libsm'
15 'libx11'
16 'libxext'
17 'libxfixes'
18 'libxi'
19 'libxkbcommon'
20 'libxrender'
21 'shared-mime-info'
22)
23optdepends=(
24 'cuda: Cycles renderer CUDA support'
25 'hip-runtime-amd: HIP renderer AMD support'
26 'intel-compute-runtime: Cycles renderer Intel OneAPI support'
27 'libdecor: Wayland client-side decorations support'
28)
29provides=('blender=4.5.15' 'blender-4.5' 'blender-lts')
30conflicts=('blender')
31source=(
32 "https://download.blender.org/release/Blender4.5/blender-${pkgver}-linux-x64.tar.xz"
33 "blender-4.5.sh"
34)
35sha256sums=(
36 '0d2b8bb2efe97e6c8eb57de6b7322f8800e1984e3125b60decca5f6771e4773e'
37 'fc8b07fcf73a77c9a1e074ec09a35c680d7adcf6a98a427556c923fe0aefb6e0'
38)
39
40package() {
41 local _src="blender-${pkgver}-linux-x64"
42 cd "$srcdir/$_src"
43
44 local _opt_dir="${pkgdir}/opt/blender-4.5-lts"
45 install -dm755 "$_opt_dir"
46
47 # Copy precompiled blender tree to /opt/blender-4.5-lts
48 cp -a * "$_opt_dir/"
49
50 # Ensure bundled libraries have executable permissions
51 if [ -d "$_opt_dir/lib" ]; then
52 chmod -R 755 "$_opt_dir/lib"
53 fi
54
55 # Binary wrapper and symlinks
56 install -Dm755 "${srcdir}/blender-4.5.sh" "${pkgdir}/usr/bin/blender-4.5"
57 install -dm755 "${pkgdir}/usr/bin"
58 ln -sf blender-4.5 "${pkgdir}/usr/bin/blender"
59 ln -sf /opt/blender-4.5-lts/blender-thumbnailer "${pkgdir}/usr/bin/blender-4.5-thumbnailer"
60 ln -sf blender-4.5-thumbnailer "${pkgdir}/usr/bin/blender-thumbnailer"
61
62 # Desktop integration
63 install -dm755 "${pkgdir}/usr/share/applications"
64 sed \
65 -e 's|^Exec=blender %f|Exec=blender-4.5 %f|' \
66 -e 's|^Name=Blender$|Name=Blender 4.5 LTS|' \
67 -e 's|^Icon=blender$|Icon=blender-4.5|' \
68 blender.desktop > "${pkgdir}/usr/share/applications/blender-4.5.desktop"
69 ln -sf blender-4.5.desktop "${pkgdir}/usr/share/applications/blender.desktop"
70
71 # Icons
72 install -Dm644 blender.svg "${pkgdir}/usr/share/icons/hicolor/scalable/apps/blender-4.5.svg"
73 ln -sf blender-4.5.svg "${pkgdir}/usr/share/icons/hicolor/scalable/apps/blender.svg"
74 if [ -f blender-symbolic.svg ]; then
75 install -Dm644 blender-symbolic.svg "${pkgdir}/usr/share/icons/hicolor/symbolic/apps/blender-4.5-symbolic.svg"
76 ln -sf blender-4.5-symbolic.svg "${pkgdir}/usr/share/icons/hicolor/symbolic/apps/blender-symbolic.svg"
77 fi
78
79 # Thumbnailer
80 install -dm755 "${pkgdir}/usr/share/thumbnailers"
81 cat << 'EOF' > "${pkgdir}/usr/share/thumbnailers/blender-4.5.thumbnailer"
82[Thumbnailer Entry]
83TryExec=blender-4.5-thumbnailer
84Exec=blender-4.5-thumbnailer %u %o
85MimeType=application/x-blender;
86EOF
87 ln -sf blender-4.5.thumbnailer "${pkgdir}/usr/share/thumbnailers/blender.thumbnailer"
88
89 # Licenses & documentation
90 install -dm755 "${pkgdir}/usr/share/licenses/${pkgname}"
91 if [ -d license ]; then
92 cp -a license/* "${pkgdir}/usr/share/licenses/${pkgname}/" 2>/dev/null || true
93 fi
94 if [ -f copyright.txt ]; then
95 install -Dm644 copyright.txt "${pkgdir}/usr/share/licenses/${pkgname}/copyright.txt" 2>/dev/null || true
96 fi
97}
98

Scan history

Scanned at (UTC)SeverityRules
2026-10-26 11:47:16 Low 3
2026-10-26 11:44:54 Medium 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion