cef-minimal-obs-rc-bin

LOW
maintainer tytan652 0 votes scanned 2026-11-01 00:21:48.120785
View on AUR
Why flagged

The package downloads prebuilt CEF binaries from obsproject.com, a project-affiliated host, which is not on standard whitelists but is legitimate for OBS-related builds; the source is verified via sha256sum and used only to install a dependency in /opt, posing low risk.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt CEF binaries from obsproject.com, a project-affiliated host, which is not on standard whitelists but is legitimate for OBS-related builds; the source is verified via sha256sum and used only to install a dependency in /opt, posing low risk.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:28 source_x86_64=("https://cdn-fastly.obsproject.com/downloads/cef_binary_6533_linux_x86_64_v6.tar.xz")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: tytan652 <tytan652 at tytanium dot xyz>
2
3pkgname=cef-minimal-obs-rc-bin
4_cefver="127.3.4"
5_version=${_cefver//-/_}
6_commit="a0ca18e"
7_cefbranch="6533"
8_chromiumver="127.0.${_cefbranch}.100"
9_rebuild="6" # The tarball sometime can get rebuild by OBS Project
10pkgver="${_version}+g${_commit}+chromium_${_chromiumver}_${_rebuild}"
11pkgrel=1
12epoch=3
13pkgdesc="Chromium Embedded Framework minimal release needed by OBS Studio beta release in /opt/cef-obs"
14arch=("x86_64" "aarch64")
15url="https://github.com/tytan652/cef/tree/6533-fix-stutter-and-osr-extra-info"
16license=(BSD-3-Clause)
17depends=(
18 "alsa-lib" "at-spi2-core" "cairo" "dbus" "expat" "gcc-libs" "glib2"
19 "glibc" "libcups" "libdrm" "libx11" "libxcb" "libxcomposite"
20 "libxdamage" "libxext" "libxfixes" "libxkbcommon" "libxrandr" "mesa"
21 "nspr" "nss" "pango" "wayland"
22)
23makedepends=("cmake")
24provides=("cef-minimal-obs=$pkgver")
25conflicts=("cef-minimal-obs")
26# Prevent people from using link time optimisation for this package because it make OBS unable to be built against it
27options=('!lto' '!strip' 'debug')
28source_x86_64=("https://cdn-fastly.obsproject.com/downloads/cef_binary_6533_linux_x86_64_v6.tar.xz")
29source_aarch64=("https://cdn-fastly.obsproject.com/downloads/cef_binary_6533_linux_aarch64_v6.tar.xz")
30sha256sums_x86_64=("7963335519a19ccdc5233f7334c5ab023026e2f3e9a0cc417007c09d86608146")
31sha256sums_aarch64=("642514469eaa29a5c887891084d2e73f7dc2d7405f7dfa7726b2dbc24b309999")
32
33prepare() {
34 cd "${srcdir}/cef_binary_${_cefbranch}_linux_${CARCH}"
35
36 # Fix directories permissions
37 chmod 755 Release
38 chmod 755 Resources
39 chmod 755 Resources/locales
40 chmod 755 include
41 chmod 755 include/base
42 chmod 755 include/base/internal
43 chmod 755 include/capi
44 chmod 755 include/capi/test
45 chmod 755 include/capi/views
46 chmod 755 include/internal
47 chmod 755 include/test
48 chmod 755 include/views
49 chmod 755 include/wrapper
50 chmod 755 libcef_dll
51 chmod 755 libcef_dll/base
52 chmod 755 libcef_dll/cpptoc
53 chmod 755 libcef_dll/cpptoc/test
54 chmod 755 libcef_dll/cpptoc/views
55 chmod 755 libcef_dll/ctocpp
56 chmod 755 libcef_dll/ctocpp/test
57 chmod 755 libcef_dll/ctocpp/views
58 chmod 755 libcef_dll/wrapper
59}
60
61package() {
62 mkdir -p "$pkgdir"/opt/cef-obs/
63 cp -a "${srcdir}/cef_binary_${_cefbranch}_linux_${CARCH}"/* "$pkgdir"/opt/cef-obs
64 rm -f "$pkgdir"/opt/cef-obs/LICENSE.txt
65 rm -rf "$pkgdir"/opt/cef-obs/cmake
66 install -Dm644 "${srcdir}/cef_binary_${_cefbranch}_linux_${CARCH}/LICENSE.txt" "$pkgdir"/usr/share/licenses/${pkgname}/LICENSE
67}
68

Scan history

Scanned at (UTC)SeverityRules
2026-11-01 00:21:48 Low 2
2026-10-31 00:07:41 Low 2
2026-10-30 00:29:30 Low 2
2026-10-29 00:13:55 Low 2
2026-10-28 00:06:54 Low 2
2026-10-27 00:23:28 Low 2
2026-10-26 00:12:40 Low 2
2026-10-25 00:20:48 Low 2
2026-10-24 00:14:55 Low 2
2026-10-23 00:02:19 Low 2
2026-10-22 00:13:10 Low 2
2026-10-21 00:12:50 Low 2
2026-10-20 00:10:31 Low 2
2026-10-19 00:03:55 Low 2
2026-10-18 00:06:55 Low 2
2026-10-17 00:21:55 Low 2
2026-10-16 00:12:47 Low 2
2026-10-15 00:28:05 Low 2
2026-10-14 00:06:47 Low 2
2026-10-13 00:23:45 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion