cef-minimal-obs-rc-bin

maintainer tytan652 · 0 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package downloads prebuilt CEF binaries from obsproject.com, a project-affiliated host, which is not on standard whitelists but is legitimate for OBS-related builds; the source is verified via sha256sum and used only to install a dependency in /opt, posing low risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt CEF binaries from obsproject.com, a project-affiliated host, which is not on standard whitelists but is legitimate for OBS-related builds; the source is verified via sha256sum and used only to install a dependency in /opt, posing low risk.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:28 source_x86_64=("https://cdn-fastly.obsproject.com/downloads/cef_binary_6533_linux_x86_64_v6.tar.xz")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: tytan652 <tytan652 at tytanium dot xyz>
2
3pkgname=cef-minimal-obs-rc-bin
4_cefver="127.3.4"
5_version=${_cefver//-/_}
6_commit="a0ca18e"
7_cefbranch="6533"
8_chromiumver="127.0.${_cefbranch}.100"
9_rebuild="6" # The tarball sometime can get rebuild by OBS Project
10pkgver="${_version}+g${_commit}+chromium_${_chromiumver}_${_rebuild}"
11pkgrel=1
12epoch=3
13pkgdesc="Chromium Embedded Framework minimal release needed by OBS Studio beta release in /opt/cef-obs"
14arch=("x86_64" "aarch64")
15url="https://github.com/tytan652/cef/tree/6533-fix-stutter-and-osr-extra-info"
16license=(BSD-3-Clause)
17depends=(
18 "alsa-lib" "at-spi2-core" "cairo" "dbus" "expat" "gcc-libs" "glib2"
19 "glibc" "libcups" "libdrm" "libx11" "libxcb" "libxcomposite"
20 "libxdamage" "libxext" "libxfixes" "libxkbcommon" "libxrandr" "mesa"
21 "nspr" "nss" "pango" "wayland"
22)
23makedepends=("cmake")
24provides=("cef-minimal-obs=$pkgver")
25conflicts=("cef-minimal-obs")
26# Prevent people from using link time optimisation for this package because it make OBS unable to be built against it
27options=('!lto' '!strip' 'debug')
28source_x86_64=("https://cdn-fastly.obsproject.com/downloads/cef_binary_6533_linux_x86_64_v6.tar.xz")
29source_aarch64=("https://cdn-fastly.obsproject.com/downloads/cef_binary_6533_linux_aarch64_v6.tar.xz")
30sha256sums_x86_64=("7963335519a19ccdc5233f7334c5ab023026e2f3e9a0cc417007c09d86608146")
31sha256sums_aarch64=("642514469eaa29a5c887891084d2e73f7dc2d7405f7dfa7726b2dbc24b309999")
32
33prepare() {
34 cd "${srcdir}/cef_binary_${_cefbranch}_linux_${CARCH}"
35
36 # Fix directories permissions
37 chmod 755 Release
38 chmod 755 Resources
39 chmod 755 Resources/locales
40 chmod 755 include
41 chmod 755 include/base
42 chmod 755 include/base/internal
43 chmod 755 include/capi
44 chmod 755 include/capi/test
45 chmod 755 include/capi/views
46 chmod 755 include/internal
47 chmod 755 include/test
48 chmod 755 include/views
49 chmod 755 include/wrapper
50 chmod 755 libcef_dll
51 chmod 755 libcef_dll/base
52 chmod 755 libcef_dll/cpptoc
53 chmod 755 libcef_dll/cpptoc/test
54 chmod 755 libcef_dll/cpptoc/views
55 chmod 755 libcef_dll/ctocpp
56 chmod 755 libcef_dll/ctocpp/test
57 chmod 755 libcef_dll/ctocpp/views
58 chmod 755 libcef_dll/wrapper
59}
60
61package() {
62 mkdir -p "$pkgdir"/opt/cef-obs/
63 cp -a "${srcdir}/cef_binary_${_cefbranch}_linux_${CARCH}"/* "$pkgdir"/opt/cef-obs
64 rm -f "$pkgdir"/opt/cef-obs/LICENSE.txt
65 rm -rf "$pkgdir"/opt/cef-obs/cmake
66 install -Dm644 "${srcdir}/cef_binary_${_cefbranch}_linux_${CARCH}/LICENSE.txt" "$pkgdir"/usr/share/licenses/${pkgname}/LICENSE
67}
68

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion