hybrid-encoder

maintainer JohnyRi · 46 votes · scanned 2026-08-03 00:08:14.047287

MEDIUM

Why flagged The package downloads a prebuilt binary from a non-whitelisted host (selur.de), which is not a standard code or release hosting platform, posing a moderate supply chain risk if the host were compromised or the download redirected.

Triggered rules

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:37 source_x86_64=(https://www.selur.de/files/hybrid_downloads/Hybrid_${pkgver}_64bit_binary_qt642.zip

MEDIUM AI review llm_review

An AI model (qwen/qwen3-235b-a22b-07-25) reviewed this and agrees it is MEDIUM (confidence 85%): The package downloads a prebuilt binary from a non-whitelisted host (selur.de), which is not a standard code or release hosting platform, posing a moderate supply chain risk if the host were compromised or the download redirected.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: JohnyRi <honza dot rindt at gmail dot com>
    
      2# Contributor: Hugo Osvaldo Barrera <hugo at osvaldobarrera dot com dot ar>
    
      3
    
      4pkgname=hybrid-encoder
    
      5pkgver=20260321
    
      6pkgrel=1
    
      7pkgdesc="A very complete gui for video encoding"
    
      8arch=('x86_64')
    
      9options=(!strip)
    
      10license=('custom')
    
      11depends=('framecounter' 'freetype2' 'glib2' 'openssl' 'qt6-multimedia')
    
      12optdepends=('aften: support for AC-3 audio encoding'
    
      13'bdsup2subpp-git: support for subtitle converison for image based stream formats'
    
      14'dcaenc: support for DTS audio encoding'
    
      15'delaycut: AC-3, DTS, MPA and WAV audio delay and cutting support' 
    
      16'divx265: support for H.265 video encoding'  
    
      17'fdkaac: support for AAC audio encoding'
    
      18'flac: support for lossless FLAC audio encoding'
    
      19'gpac: support for MP4 container muxing'
    
      20'kvazaar: support for H.265 video encoding'
    
      21'libvpx: support fot VP8 video encoding'
    
      22'lsdvd: support for listing the content of DVD disks'
    
      23'mediainfo: support for technical and tag information about a video or audio file'
    
      24'mencoder: support for video and audio encoding'
    
      25'mkvtoolnix-cli: support for MKV container muxing'
    
      26'mp4fpsmod: support for MP4 time code modification'
    
      27'mplayer: support for video preview'
    
      28'neroaacenc: support for NERO AAC audio encoding'
    
      29'opus-tools: support for Opus audio encoding'
    
      30'sox: support for processing of audio files'
    
      31'tsmuxer: support for TS container'
    
      32'vapoursynth: A video processing framework with the future in mind'
    
      33'x264: support for H.264 video encoding'
    
      34'x265: support for H.265 video encoding')
    
      35url="http://www.selur.de/"
    
      36
    
      37source_x86_64=(https://www.selur.de/files/hybrid_downloads/Hybrid_${pkgver}_64bit_binary_qt642.zip
    
      38          hybrid.desktop
    
      39          Hybrid.png
    
      40          LICENSE)
    
      41
    
      42package() {
    
      43  cd "${srcdir}"
    
      44  install -D -m755 Hybrid "${pkgdir}"/usr/bin/Hybrid
    
      45  install -D -m644 hybrid.desktop "${pkgdir}"/usr/share/applications/hybrid.desktop
    
      46  install -D -m644 Hybrid.png "${pkgdir}"/usr/share/pixmaps/Hybrid.png
    
      47  install -D -m644 LICENSE "$pkgdir"/usr/share/licenses/$pkgname/LICENSE
    
      48}
    
      49sha256sums_x86_64=('a4691620e127a9da26a0968002ba5b4725e6b27b29f273c05b781ca7d8bfc6a8'
    
      50                   '5052a2a78a1d3dc5a2b20b352e9aa01bbc2d9afd0da28de604e970acc216384c'
    
      51                   '4b62792db9e95bb0e4c0969e72001b146b55e5e6af91df81c404d6ef61dd633f'
    
      52                   '9b56b57bb0cec33e3964c953f6340004476aad346d9a50dc93b8389ab083c015')
    
      53

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	MEDIUM	2
2026-08-02 00:16:08	MEDIUM	2
2026-08-01 00:11:18	MEDIUM	2
2026-07-31 00:14:10	MEDIUM	2
2026-07-30 00:17:23	MEDIUM	2
2026-07-29 00:25:53	MEDIUM	2
2026-07-28 00:07:28	MEDIUM	2
2026-07-27 00:24:32	MEDIUM	2
2026-07-26 00:07:32	MEDIUM	2
2026-07-25 00:13:44	MEDIUM	2
2026-07-24 00:02:28	MEDIUM	2
2026-07-23 00:14:47	MEDIUM	2
2026-07-22 00:29:32	MEDIUM	2
2026-07-21 00:24:15	MEDIUM	2
2026-07-20 00:19:49	MEDIUM	2
2026-07-19 00:17:08	MEDIUM	2
2026-07-18 00:14:48	MEDIUM	2
2026-07-17 00:06:16	MEDIUM	2
2026-07-16 00:05:41	MEDIUM	2
2026-07-15 00:09:25	MEDIUM	2