iriunwebcam-bin

LOW

maintainer xiota 19 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The package downloads a prebuilt .deb from the project's own GitLab Pages host (iriun.gitlab.io), which is plausibly official; while not on a standard domain, it is used consistently by the project and contains no obfuscated or malicious payloads, and the installed files are standard binaries and configs.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt .deb from the project's own GitLab Pages host (iriun.gitlab.io), which is plausibly official; while not on a standard domain, it is used consistently by the project and contains no obfuscated or malicious payloads, and the installed files are standard binaries and configs.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:19 "iriunwebcam-${pkgver}.deb"::"http://iriun.gitlab.io/iriunwebcam-${pkgver}.deb"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer:
    
      2# Contributor: Barfin
    
      3# Contributor: DanielH, agstrc
    
      4
    
      5_pkgname="iriunwebcam"
    
      6pkgname="$_pkgname-bin"
    
      7pkgver=2.9.3
    
      8pkgrel=1
    
      9pkgdesc="Use your phone's camera as a wireless webcam in your PC"
    
      10url="https://iriun.com/"
    
      11license=('LicenseRef-Iriun')
    
      12arch=('x86_64')
    
      13
    
      14optdepends=(
    
      15  'android-tools: adb'
    
      16)
    
      17
    
      18source=(
    
      19  "iriunwebcam-${pkgver}.deb"::"http://iriun.gitlab.io/iriunwebcam-${pkgver}.deb"
    
      20  "LICENSE.iriun.txt" # extracted from mac archive
    
      21)
    
      22sha256sums=(
    
      23  '3635363ec642788aca1e5a3fd45ee978ab6f69ac0a0d2ab5d68ae11bc4a80cc9'
    
      24  'eb2ba875d0b419ab7d6327a933d619d1b9eed51f89d49e55ed789bf8f37f75be'
    
      25)
    
      26
    
      27provides=("$_pkgname")
    
      28conflicts=("$_pkgname")
    
      29
    
      30options=("!emptydirs" "!debug")
    
      31
    
      32package() {
    
      33  depends=(
    
      34    'alsa-lib'
    
      35    'avahi'
    
      36    'libdrm'
    
      37    'qt6-base'
    
      38    'v4l2loopback-dkms'
    
      39  )
    
      40
    
      41  bsdtar -xf "$srcdir/data.tar.zst" -C "$pkgdir"
    
      42
    
      43  # binary
    
      44  mkdir -pm755 "$pkgdir/usr/bin"
    
      45  mv "$pkgdir/usr/local/bin/iriunwebcam" "$pkgdir/usr/bin/"
    
      46
    
      47  # spa plugin
    
      48  mv "$pkgdir/usr/lib/x86_64-linux-gnu/spa-0.2" "$pkgdir/usr/lib/"
    
      49
    
      50  # config
    
      51  mv "$pkgdir/etc/modprobe.d" "$pkgdir/usr/lib/"
    
      52  mv "$pkgdir/etc/modules-load.d" "$pkgdir/usr/lib/"
    
      53
    
      54  # fixes
    
      55  sed -E -e 's&/.*/&&' -i "$pkgdir/usr/share/applications/iriunwebcam.desktop"
    
      56
    
      57  # license
    
      58  install -Dm644 LICENSE.iriun.txt -t "$pkgdir/usr/share/licenses/$pkgname/"
    
      59
    
      60  # permissions
    
      61  chmod -R u+rwX,go+rX,go-w "$pkgdir"
    
      62}
    
      63

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 00:29:17	Low	2