bumblebee-forceunload

LOW

maintainer xythrez 0 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The source URL uses a non-standard host (bumblebee-project.org), but it hosts the official project tarball, which is a normal build source; the package applies patches and builds from source, posing no execution risk beyond standard AUR packages.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 90%): The source URL uses a non-standard host (bumblebee-project.org), but it hosts the official project tarball, which is a normal build source; the package applies patches and builds from source, posing no execution risk beyond standard AUR packages.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:26 source=("https://www.bumblebee-project.org/${_pkgname}-${pkgver}.tar.gz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Yiyao Yu <yuydevel at protonmail dot com>
    
      2
    
      3_pkgname=bumblebee
    
      4pkgname=${_pkgname}-forceunload
    
      5pkgver=3.2.1
    
      6pkgrel=20
    
      7pkgdesc="NVIDIA Optimus support for Linux through VirtualGL (with kernel module unload patch)"
    
      8arch=('x86_64')
    
      9depends=('virtualgl' 'glib2' 'mesa-libgl')
    
      10makedepends=('help2man')
    
      11optdepends=('bbswitch: switch on/off discrete card'
    
      12            'nvidia: NVIDIA kernel driver'
    
      13            'nvidia-390xx: NVIDIA kernel driver for old devices'
    
      14            'nvidia-340xx: NVIDIA kernel driver for even older devices'
    
      15            'primus: faster back-end for optirun'
    
      16            'lib32-virtualgl: run 32bit applications with optirun'
    
      17            'lib32-primus: faster back-end for optirun')
    
      18url="https://github.com/yawor/Bumblebee/tree/forceunload"
    
      19license=("GPL3")
    
      20provides=('bumblebee')
    
      21conflicts=('bumblebee')
    
      22install=bumblebee.install
    
      23backup=('etc/bumblebee/bumblebee.conf'
    
      24        'etc/bumblebee/xorg.conf.nouveau'
    
      25        'etc/bumblebee/xorg.conf.nvidia')
    
      26source=("https://www.bumblebee-project.org/${_pkgname}-${pkgver}.tar.gz"
    
      27        "0001-bb_nvidia_modeset-detection_bug699_01.patch::https://github.com/arafey/Bumblebee/commit/5636b24fa86a005a5d2e30bd794516db13ccba56.patch"
    
      28        "0002-bb_nvidia_modeset-detection_bug699_02.patch::https://github.com/arafey/Bumblebee/commit/09d537e8e5313cd0f2c7bf6620ca70454de8a04a.patch"
    
      29        "0003-bb_nvidia_umv_detection_bug699.patch::https://github.com/arafey/Bumblebee/commit/dbbf20a38aa2bffb10c4e8af583b34dff6bfe721.patch"
    
      30        "0004-bb_nvidia_drm_detection_bug699_01.patch::https://github.com/arafey/Bumblebee/commit/bcfe4dd16dd6194f1edbdc53b874a4f408343c5c.patch"
    
      31        "0005-bb_nvidia_drm_detection_bug699_02.patch::https://github.com/arafey/Bumblebee/commit/fcfe596eb13f62ca9dd7de272a5a87ae843b2a00.patch"
    
      32        "0006-bb_hexadicimal_bug573.patch::https://github.com/Bumblebee-Project/Bumblebee/commit/2073f8537412aa47755eb6f3f22a114403e5285b.patch"
    
      33        "0007-bb_mutebblogger.patch"
    
      34        "0008-libglvnd.patch"
    
      35        "0009-force_unload.patch"
    
      36        "bumblebee.conf"
    
      37        "bumblebee.sysusers")
    
      38sha256sums=('1018703b07e2f607a4641249d69478ce076ae5a1e9dd6cff5694d394fa7ee30e'
    
      39            'aff3528d17a77ff19b4e0a7a10682b8351456f11795f71ef62b315e774fb408a'
    
      40            '70ad9b3d8e0d70a504110651c6f5f3a1b1d3c4c44eeb0fd49a4463e99124a47b'
    
      41            '16fd522f412125b3c9b5709d78584744c70cb627e8baf8cd6025a71d278f79a6'
    
      42            '4676606012319ce7a9e3890d6e83445ae674f5ff2994925d59ec2229fbae5a14'
    
      43            '206f71c022b29a77227a3c7ba1f5cf68e219b957b5d807be9a30b6a6a7cafddc'
    
      44            '0b7c1f4bb2e27d131c6c21fd7006d075584917ac4259bd9899e6eca99efc0ece'
    
      45            'cbe3e1717bc80146b87d8f2ab1158ee9e094ea5bb2ca9a4a8c09c24b086a7792'
    
      46            'b260d64a53617807afe21560db0592d114d7775b182e13fb59349f0157c8dba4'
    
      47            '317091362c1cd92415cca74cd10ef9fd697145fc1ba3602e27abd6a045196dfc'
    
      48            '1c3d4f5d40245a23a5f1cb1f2f6bd4274ff3c5b3749f76a09255191328ae3193'
    
      49            '1bc209c21b4f6d1975ede4091829baf98d20b33100b9d21061393880bb391fd8')
    
      50
    
      51build() {
    
      52    cd "${srcdir}/${_pkgname}-${pkgver}"
    
      53    for p in ${srcdir}/*.patch; do
    
      54        patch -Np1 -i "$p"
    
      55    done
    
      56
    
      57    ./configure \
    
      58        CONF_DRIVER_MODULE_NVIDIA=nvidia \
    
      59        CONF_LDPATH_NVIDIA=/usr/lib/nvidia:/usr/lib32/nvidia:/usr/lib:/usr/lib32 \
    
      60        CONF_MODPATH_NVIDIA=/usr/lib/nvidia/xorg,/usr/lib/xorg/modules \
    
      61        --prefix=/usr \
    
      62        --sbindir=/usr/bin \
    
      63        --with-udev-rules=/usr/lib/udev/rules.d \
    
      64        --sysconfdir=/etc \
    
      65        --without-pidfile
    
      66    make
    
      67}
    
      68
    
      69package() {
    
      70    cd "${srcdir}/${_pkgname}-${pkgver}"
    
      71
    
      72    # Install main app
    
      73    make install DESTDIR="$pkgdir" \
    
      74      completiondir=/usr/share/bash-completion/completions
    
      75
    
      76    # Blacklist nvidia and nouveau modules
    
      77    # Reference: https://github.com/Bumblebee-Project/Bumblebee/issues/719
    
      78    install -Dm644 "${srcdir}/bumblebee.conf" "${pkgdir}/usr/lib/modprobe.d/bumblebee.conf"
    
      79
    
      80    # Install systemd unit
    
      81    install -Dm644 "scripts/systemd/bumblebeed.service" "${pkgdir}/usr/lib/systemd/system/bumblebeed.service"
    
      82    sed -i "s/sbin/bin/" "${pkgdir}/usr/lib/systemd/system/bumblebeed.service"
    
      83
    
      84    # Make bash_completion work
    
      85    mv -v "$pkgdir"/usr/share/bash-completion/completions/{bumblebee,optirun}
    
      86
    
      87    # Fix for FS#59312
    
      88    sed -i "s/have/_have/" "${pkgdir}/usr/share/bash-completion/completions/optirun"
    
      89
    
      90    install -Dm644 "$srcdir"/bumblebee.sysusers "$pkgdir"/usr/lib/sysusers.d/$_pkgname.conf
    
      91}
    
      92

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 00:29:17	Low	2