cef-minimal-obs-rc-bin
The package downloads prebuilt CEF binaries from obsproject.com, a project-affiliated host, which is not on standard whitelists but is legitimate for OBS-related builds; the source is verified via sha256sum and used only to install a dependency in /opt, posing low risk.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt CEF binaries from obsproject.com, a project-affiliated host, which is not on standard whitelists but is legitimate for OBS-related builds; the source is verified via sha256sum and used only to install a dependency in /opt, posing low risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:28
source_x86_64=("https://cdn-fastly.obsproject.com/downloads/cef_binary_6533_linux_x86_64_v6.tar.xz")
PKGBUILD
1 offending line(s) highlighted# Maintainer: tytan652 <tytan652 at tytanium dot xyz>
pkgname=cef-minimal-obs-rc-bin
_cefver="127.3.4"
_version=${_cefver//-/_}
_commit="a0ca18e"
_cefbranch="6533"
_chromiumver="127.0.${_cefbranch}.100"
_rebuild="6" # The tarball sometime can get rebuild by OBS Project
pkgver="${_version}+g${_commit}+chromium_${_chromiumver}_${_rebuild}"
pkgrel=1
epoch=3
pkgdesc="Chromium Embedded Framework minimal release needed by OBS Studio beta release in /opt/cef-obs"
arch=("x86_64" "aarch64")
url="https://github.com/tytan652/cef/tree/6533-fix-stutter-and-osr-extra-info"
license=(BSD-3-Clause)
depends=(
"alsa-lib" "at-spi2-core" "cairo" "dbus" "expat" "gcc-libs" "glib2"
"glibc" "libcups" "libdrm" "libx11" "libxcb" "libxcomposite"
"libxdamage" "libxext" "libxfixes" "libxkbcommon" "libxrandr" "mesa"
"nspr" "nss" "pango" "wayland"
)
makedepends=("cmake")
provides=("cef-minimal-obs=$pkgver")
conflicts=("cef-minimal-obs")
# Prevent people from using link time optimisation for this package because it make OBS unable to be built against it
options=('!lto' '!strip' 'debug')
source_x86_64=("https://cdn-fastly.obsproject.com/downloads/cef_binary_6533_linux_x86_64_v6.tar.xz")
source_aarch64=("https://cdn-fastly.obsproject.com/downloads/cef_binary_6533_linux_aarch64_v6.tar.xz")
sha256sums_x86_64=("7963335519a19ccdc5233f7334c5ab023026e2f3e9a0cc417007c09d86608146")
sha256sums_aarch64=("642514469eaa29a5c887891084d2e73f7dc2d7405f7dfa7726b2dbc24b309999")
prepare() {
cd "${srcdir}/cef_binary_${_cefbranch}_linux_${CARCH}"
# Fix directories permissions
chmod 755 Release
chmod 755 Resources
chmod 755 Resources/locales
chmod 755 include
chmod 755 include/base
chmod 755 include/base/internal
chmod 755 include/capi
chmod 755 include/capi/test
chmod 755 include/capi/views
chmod 755 include/internal
chmod 755 include/test
chmod 755 include/views
chmod 755 include/wrapper
chmod 755 libcef_dll
chmod 755 libcef_dll/base
chmod 755 libcef_dll/cpptoc
chmod 755 libcef_dll/cpptoc/test
chmod 755 libcef_dll/cpptoc/views
chmod 755 libcef_dll/ctocpp
chmod 755 libcef_dll/ctocpp/test
chmod 755 libcef_dll/ctocpp/views
chmod 755 libcef_dll/wrapper
}
package() {
mkdir -p "$pkgdir"/opt/cef-obs/
cp -a "${srcdir}/cef_binary_${_cefbranch}_linux_${CARCH}"/* "$pkgdir"/opt/cef-obs
rm -f "$pkgdir"/opt/cef-obs/LICENSE.txt
rm -rf "$pkgdir"/opt/cef-obs/cmake
install -Dm644 "${srcdir}/cef_binary_${_cefbranch}_linux_${CARCH}/LICENSE.txt" "$pkgdir"/usr/share/licenses/${pkgname}/LICENSE
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |