chromium-widevine

MEDIUM

maintainer xAsh 430 votes scanned 2026-09-06 17:12:21.241024

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:15 source=(https://www.google.com/dl/release2/chrome_component/accssjtqfpf5qicscrptql4jyyxa_4.10.2934.0/oimompecagnajdejgnnjijobebaeigek_4.10.2934.0_linux_ph722a3wl2goebkpserszm6bde.crx3)

Medium Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: envolution
    
      2# Contributor: Doug Newgard <scimmia at archlinux dot org>
    
      3# shellcheck shell=bash disable=SC2034,SC2154
    
      4# ci|prebuild=_sourcefix.sh| https://github.com/envolution/aur/blob/main/maintain/build/chromium-widevine/_sourcefix.sh
    
      5
    
      6pkgname=chromium-widevine
    
      7pkgdesc='A browser plugin designed for the viewing of premium video content'
    
      8pkgver=4.10.2934.0
    
      9pkgrel=1
    
      10epoch=1
    
      11arch=('x86_64')
    
      12url='https://www.widevine.com/'
    
      13license=('custom')
    
      14options=('!strip')
    
      15source=(https://www.google.com/dl/release2/chrome_component/accssjtqfpf5qicscrptql4jyyxa_4.10.2934.0/oimompecagnajdejgnnjijobebaeigek_4.10.2934.0_linux_ph722a3wl2goebkpserszm6bde.crx3)
    
      16sha256sums=('d36111684f13d2f76f181eb0117a873e12e4ee6f0f9a3027a9d022b787d74eb2')
    
      17
    
      18package() {
    
      19  depends=('gcc-libs' 'glib2' 'glibc' 'nspr' 'nss')
    
      20
    
      21  install -Dm755 "${srcdir}/_platform_specific/linux_x64/libwidevinecdm.so" \
    
      22    "${pkgdir}/usr/lib/chromium/WidevineCdm/_platform_specific/linux_x64/libwidevinecdm.so"
    
      23  install -Dm644 "${srcdir}/manifest.json" \
    
      24    "${pkgdir}/usr/lib/chromium/WidevineCdm/manifest.json"
    
      25  install -Dm644 "${srcdir}/LICENSE" \
    
      26    "${pkgdir}/usr/lib/chromium/WidevineCdm/LICENSE"
    
      27  install -Dm644 "${srcdir}/LICENSE" \
    
      28    "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      29
    
      30  # backward compatibility
    
      31  ln -s WidevineCdm/_platform_specific/linux_x64/libwidevinecdm.so "$pkgdir/usr/lib/chromium/libwidevinecdm.so"
    
      32}
    
      33# vim:set ts=2 sw=2 et:
    
      34

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-06 17:12:21	Medium	2
2026-06-20 16:02:46	Clean	2
2026-06-20 00:50:07	Medium	2
2026-06-20 00:18:46	Low	1
2026-06-19 23:51:18	Medium	2
2026-06-19 19:07:35	Low	2
2026-06-18 16:11:54	Low	1