emby-server-beta

maintainer nicolahinssen · 14 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source URL for ffmpeg is hosted on a GitHub Pages domain (mediabrowser.github.io) which is plausibly the project's official infrastructure, making it a legitimate build dependency despite not being on a standard host; the package otherwise installs verified prebuilt binaries and assets from official project releases.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source URL for ffmpeg is hosted on a GitHub Pages domain (mediabrowser.github.io) which is plausibly the project's official infrastructure, making it a legitimate build dependency despite not being on a standard host; the package otherwise installs verified prebuilt binaries and assets from official project releases.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:56 "https://mediabrowser.github.io/embytools/ffmpeg-${_ffmpeg_ver}-x64.tar.xz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Nicola Hinssen <nicola.hinssen@gmail.com>
    
      2# Contributor: Bjorn Nostvold <bjorn.nostvold@gmail.com>
    
      3# Contributor: Maxime Gauduin <alucryd@archlinux.org>
    
      4# Contributor: Daniel Seymour <dannyseeless@gmail.com>
    
      5
    
      6pkgname=emby-server-beta
    
      7pkgver=4.10.0.22
    
      8pkgrel=1
    
      9_ffmpeg_ver=2023_06_25
    
      10pkgdesc='Bring together your videos, music, photos, and live television'
    
      11arch=('x86_64')
    
      12url='https://emby.media'
    
      13license=('custom')
    
      14depends=('alsa-lib'
    
      15         'aom'
    
      16         'aspnet-runtime-8.0'
    
      17         'bzip2'
    
      18         'dotnet-runtime-8.0'
    
      19         'expat'
    
      20         'fontconfig'
    
      21         'fribidi'
    
      22         'glibc'
    
      23         'gmp'
    
      24         'gnutls'
    
      25         'lame'
    
      26         'libass.so'
    
      27         'libchromaprint.so'
    
      28         'libdav1d.so'         
    
      29         'libdrm'
    
      30         'libfreetype.so'
    
      31         'libjpeg-turbo'
    
      32         'libmfx'
    
      33         'libpng'
    
      34         'libtesseract.so'
    
      35         'libtheora'
    
      36         'libva-drm.so'
    
      37         'libva.so'
    
      38         'libvips'
    
      39         'libvorbisenc.so'
    
      40         'libvorbis.so'
    
      41         'libwebp'
    
      42         'libx264.so'
    
      43         'libx265.so'
    
      44         'ocl-icd'
    
      45         'opus'
    
      46         'skia-sharp'
    
      47         'sqlite'
    
      48         'zvbi'
    
      49         'zlib')
    
      50makedepends=()
    
      51optdepends=('intel-media-sdk: Intel QuickSync support (requires Emby Premiere)'
    
      52            'nvidia-utils: Nvidia NVDEC/NVENC support (requires Emby Premiere)')
    
      53provides=('emby-server')
    
      54conflicts=('emby-server')
    
      55source=("https://github.com/MediaBrowser/Emby.Releases/releases/download/${pkgver}/embyserver-netcore_${pkgver}.zip"
    
      56        "https://mediabrowser.github.io/embytools/ffmpeg-${_ffmpeg_ver}-x64.tar.xz"
    
      57        'emby-server'
    
      58        'emby-server.conf'
    
      59        'emby-server.service'
    
      60        'license.docx')
    
      61noextract=('license.docx')
    
      62backup=('etc/conf.d/emby-server')
    
      63install=emby-server.install
    
      64sha256sums=('16eb294eb4097a151780da34a1772ca567591c9ba0cfe680e0ef6bb800ed7edd'
    
      65            '70db9e2c1d5eb4345e34a6329918219da12684dded8226afff0f779a4a12f78c'
    
      66            '0351d6e9118853e3aa275d62b67dce4444b3d85130b05fb889b2069f364f47ca'
    
      67            '8bd03d803e295bea89e9c7bad17e774218f8dc4be9826af124b1f83bc4b256b6'
    
      68            'a7f2e38d2d196984d1c1632c851215aea9072b3af998d10a6b68477ad886ea14'
    
      69            'a6d7ea65dcb06392479a85e1a10a7aeb872d803da6f784f6935fcd4ee63008c6')
    
      70
    
      71prepare() {
    
      72  rm -rf system/{electron,runtimes/{osx,tizen*,win*}}
    
      73}
    
      74
    
      75package() {
    
      76  install -dm 755 "${pkgdir}"/usr/lib
    
      77  cp -dr --no-preserve='ownership' system "${pkgdir}"/usr/lib/emby-server
    
      78  install -Dm 755 emby-server -t "${pkgdir}"/usr/bin/
    
      79  install -Dm 644 emby-server.service -t "${pkgdir}"/usr/lib/systemd/system/
    
      80  install -Dm 644 emby-server.conf "${pkgdir}"/etc/conf.d/emby-server
    
      81  install -Dm 644 license.docx -t "${pkgdir}"/usr/share/licenses/$pkgname/license.docx
    
      82
    
      83  install -dm 755 "${pkgdir}/opt/emby-server/bin"
    
      84  install -dm 755 "${pkgdir}/opt/emby-server/lib"
    
      85
    
      86  cp -dr --no-preserve='ownership' bin "${pkgdir}/opt/emby-server"
    
      87  cp -dr --no-preserve='ownership' lib "${pkgdir}/opt/emby-server"
    
      88}
    
      89

Changes since previous scan

--- PKGBUILD @ 2026-08-01 00:11
+++ PKGBUILD @ 2026-08-03 00:08
@@ -4,7 +4,7 @@
 # Contributor: Daniel Seymour <dannyseeless@gmail.com>
 
 pkgname=emby-server-beta
-pkgver=4.10.0.21
+pkgver=4.10.0.22
 pkgrel=1
 _ffmpeg_ver=2023_06_25
 pkgdesc='Bring together your videos, music, photos, and live television'
@@ -61,7 +61,7 @@
 noextract=('license.docx')
 backup=('etc/conf.d/emby-server')
 install=emby-server.install
-sha256sums=('34d5f5a1fbadfb00105f2e99d9e876d6ef6d0a6f3959de74b5ce859b877bcd6e'
+sha256sums=('16eb294eb4097a151780da34a1772ca567591c9ba0cfe680e0ef6bb800ed7edd'
             '70db9e2c1d5eb4345e34a6329918219da12684dded8226afff0f779a4a12f78c'
             '0351d6e9118853e3aa275d62b67dce4444b3d85130b05fb889b2069f364f47ca'
             '8bd03d803e295bea89e9c7bad17e774218f8dc4be9826af124b1f83bc4b256b6'

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 03:19:42	MEDIUM	1
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 01:13:52	MEDIUM	1
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 05:54:03	MEDIUM	1