kodi-git-eventclients
maintainer graysky
· 84 votes
· base
kodi-git
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The package builds Kodi from its official GitHub repository and uses additional sources from GitHub and ffmpeg.org, all of which are project-owned or official; the non-standard host 'mirrors.kodi.tv' is an official Kodi infrastructure, making the source trustworthy despite not being on a general whitelist.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds Kodi from its official GitHub repository and uses additional sources from GitHub and ffmpeg.org, all of which are project-owned or official; the non-standard host 'mirrors.kodi.tv' is an official Kodi infrastructure, making the source trustworthy despite not being on a general whitelist.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:82
"https://mirrors.kodi.tv/build-deps/sources/crossguid-$_crossguid_version.tar.gz"
PKGBUILD
1 offending line(s) highlighted
1
# vim:set ts=2 sw=2 et:
2
# Maintainer graysky <therealgraysky AT protonmail DOT com>
3
# Contributor: BlackIkeEagle < ike DOT devolder AT gmail DOT com >
4
# Contributor: Sergej Pupykin <pupykin.s+arch@gmail.com>
5
# Contributor: DonVla <donvla@users.sourceforge.net>
6
# Contributor: Ulf Winkelvos <ulf [at] winkelvos [dot] de>
7
# Contributor: Ralf Barth <archlinux dot org at haggy dot org>
8
# Contributor: B & monty - Thanks for your hints :)
9
# Contributor: marzoul
10
# Contributor: Sergej Pupykin <pupykin.s+arch@gmail.com>
11
# Contributor: Brad Fanella <bradfanella@archlinux.us>
12
# Contributor: [vEX] <niechift.dot.vex.at.gmail.dot.com>
13
# Contributor: Zeqadious <zeqadious.at.gmail.dot.com>
14
# Contributor: Bartłomiej Piotrowski <bpiotrowski@archlinux.org>
15
# Contributor: Maxime Gauduin <alucryd@gmail.com>
16
#
17
# Original credits go to Edgar Hucek <gimli at dark-green dot com>
18
# for his xbmc-vdpau-vdr PKGBUILD at https://archvdr.svn.sourceforge.net/svnroot/archvdr/trunk/archvdr/xbmc-vdpau-vdr/PKGBUILD
19
20
# set this to anything to build with clang rather than with gcc
21
_clangbuild=
22
23
# define the applicaton render system, valid values are either 'gl' or 'gles'
24
_renderer=gl
25
26
pkgbase=kodi-git
27
pkgname=("$pkgbase" "$pkgbase-eventclients" "$pkgbase-tools-texturepacker" "$pkgbase-dev")
28
pkgver=r71439.3640aaaed83
29
pkgrel=2
30
arch=('x86_64')
31
url="https://kodi.tv"
32
license=('GPL-2.0-or-later')
33
makedepends=(
34
'bluez-libs' 'cmake' 'curl' 'dav1d' 'doxygen' 'git' 'glew'
35
# jdk23-openjdk causes build errors
36
'gperf' 'hicolor-icon-theme' 'java-runtime<21' 'fmt' 'libass'
37
'libbluray' 'libcdio' 'libcec' 'libgl' 'mariadb-libs' 'libmicrohttpd'
38
'libmodplug' 'libmpeg2' 'libnfs' 'libpulse' 'libva'
39
'libvdpau' 'libxrandr' 'libxslt' 'lirc' 'lzo' 'mesa' 'nasm'
40
'pipewire' 'python-pycryptodomex' 'python-pillow' 'python-pybluez'
41
'python-simplejson' 'smbclient' 'sndio' 'spdlog' 'taglib'
42
'tinyxml' 'swig' 'upower' 'giflib' 'nlohmann-json' 'ghostscript' 'meson' 'gtest'
43
'graphviz' 'pcre' 'tinyxml2' 'libdisplay-info' 'exiv2'
44
# cmake/scripts/linux/Install.cmake calls distutils
45
# python 3.12 does no longer come with distutils on board
46
'python-setuptools'
47
# wayland
48
'wayland-protocols' 'waylandpp' 'libxkbcommon'
49
# gbm
50
'libinput'
51
)
52
options=(!lto)
53
54
[[ -n "$_clangbuild" ]] && makedepends+=('clang' 'lld' 'llvm')
55
56
_gitname=xbmc
57
_codename=master
58
59
# Found on their respective github release pages. One can check them against
60
# what is pulled down when not specifying them in the cmake step.
61
# $CHROOT/build/kodi-git/src/kodi-build/build/download
62
#
63
# https://github.com/xbmc/FFmpeg/tags
64
# https://github.com/xbmc/libdvdcss/tags
65
# https://github.com/xbmc/libdvdnav/tags
66
# https://github.com/xbmc/libdvdread/tags
67
#
68
_libdvdcss_version="1.4.3-Next-Nexus-Alpha2-2"
69
_libdvdnav_version="6.1.1-Next-Nexus-Alpha2-2"
70
_libdvdread_version="6.1.3-Next-Nexus-Alpha2-2"
71
_ffmpeg_version="8.1.1"
72
_crossguid_version="ca1bf4b810e2d188d04cb6286f957008ee1b7681"
73
_fstrcmp_version="0.7.D001"
74
_flatbuffers_version="23.3.3"
75
_libudfread_version="1.2.0"
76
source=(
77
"git+https://github.com/xbmc/xbmc.git#branch=$_codename"
78
"libdvdcss-$_libdvdcss_version.tar.gz::https://github.com/xbmc/libdvdcss/archive/$_libdvdcss_version.tar.gz"
79
"libdvdnav-$_libdvdnav_version.tar.gz::https://github.com/xbmc/libdvdnav/archive/$_libdvdnav_version.tar.gz"
80
"libdvdread-$_libdvdread_version.tar.gz::https://github.com/xbmc/libdvdread/archive/$_libdvdread_version.tar.gz"
81
"https://ffmpeg.org/releases/ffmpeg-$_ffmpeg_version.tar.xz"
82
"https://mirrors.kodi.tv/build-deps/sources/crossguid-$_crossguid_version.tar.gz"
83
"https://mirrors.kodi.tv/build-deps/sources/fstrcmp-$_fstrcmp_version.tar.gz"
84
"https://mirrors.kodi.tv/build-deps/sources/flatbuffers-$_flatbuffers_version.tar.gz"
85
"https://mirrors.kodi.tv/build-deps/sources/libudfread-$_libudfread_version.tar.bz2"
86
)
87
noextract=(
88
"libdvdcss-$_libdvdcss_version.tar.gz"
89
"libdvdnav-$_libdvdnav_version.tar.gz"
90
"libdvdread-$_libdvdread_version.tar.gz"
91
"ffmpeg-$_ffmpeg_version.tar.xz"
92
"crossguid-$_crossguid_version.tar.gz"
93
"fstrcmp-$_fstrcmp_version.tar.gz"
94
"flatbuffers-$_flatbuffers_version.tar.gz"
95
"libudfread-$_libudfread_version.tar.bz2"
96
)
97
b2sums=('SKIP'
98
'2f503d3ab767094958f7ec10b4ad11ffd02665deee571c8f3c739bef5fc7e2ff84babc5a3fdee638dc095f896b72fe3ce65e6b688674cb5f7b7b77190992688c'
99
'db4d05836d8fbb3637ae50bdbfc0e4b612ee6b3be24addfea94ce772c3bf28d58b63a3f252d6f9f016f72f8cbb841cc1820b091226b136f4c4664385a32da73c'
100
'c94feb5a03a12efa5b7767965118d2500a088299ea36f3b82e46d157e45893e6b04503cb50f179ca681bac914457607fab26acfa6e304752b355c407578572d1'
101
'275f853672f5d8e84bed0cd98b272b576355ebb3d31ad0538ef40200cf319ac03bd10d18f67b29e8549910e7e089aef7bad1c9537ae025eae5c13fc3c4bdb6c9'
102
'0f78a8ab5a420297f666b3b8156d499a9141ec25c049d4d2bb2ba594dc585abe211a149b83c605cce4f5530207231a065d5f3a87a0c969781de8c6381afa2527'
103
'a8b68fcb8613f0d30e5ff7b862b37408472162585ca71cdff328e3299ff50476fd265467bbd77b352b22bb88c590969044f74d91c5468475504568fd269fa69e'
104
'be5e3c8ea81ce4b6f2e2c1b2f22e1172434c435f096fa7dade060578c506cff0310e3e2ef0627e26ce2be44f740652eb9a8e1b63578c18f430f7925820f04e66'
105
'954caea7ae3cc91034ce1ba802e445f4989b9a75ec34b9373b523a312d7ed6296f14c32579edb5ef094379fbd1f48dd94d7dbc9a34ecdb263d765c23b63a81d4')
106
107
pkgver() {
108
cd "$_gitname"
109
printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
110
}
111
112
prepare() {
113
[[ -d kodi-build ]] && rm -rf kodi-build
114
mkdir "$srcdir/kodi-build"
115
116
cd "$_gitname"
117
118
rm -rf system/certs # remove not needed cacert
119
120
#git stash
121
#git pull --no-edit --rebase origin pull/27165/head
122
123
if [[ -n "$_clangbuild" ]]; then
124
msg "Building with clang"
125
export CC=clang CXX=clang++
126
fi
127
}
128
129
build() {
130
cd "$srcdir/kodi-build"
131
# disable https://rfc.archlinux.page/0023-pack-relative-relocs/
132
export LDFLAGS=${LDFLAGS/-Wl,-z,pack-relative-relocs}
133
134
_args=(
135
-DCMAKE_BUILD_TYPE=Release
136
-DCMAKE_INSTALL_PREFIX=/usr
137
-DCMAKE_INSTALL_LIBDIR=/usr/lib
138
-DENABLE_SSE=ON
139
-DENABLE_SSE2=ON
140
-DENABLE_SSE3=ON
141
-DENABLE_SSSE3=ON
142
-DENABLE_SSE4_1=ON
143
-DENABLE_SSE4_2=ON
144
-DENABLE_AVX=ON
145
-DENABLE_AVX2=ON
146
-DUSE_LTO=$(nproc)
147
-DENABLE_LDGOLD=OFF
148
-DENABLE_AIRTUNES=OFF
149
-DENABLE_PLIST=OFF
150
-DENABLE_AVAHI=ON
151
-DENABLE_BLURAY=ON
152
-DENABLE_CEC=ON
153
-DENABLE_DBUS=ON
154
-DENABLE_DVDCSS=ON
155
-DENABLE_EGL=ON
156
-DENABLE_EVENTCLIENTS=ON
157
-DENABLE_MICROHTTPD=ON
158
-DENABLE_MYSQLCLIENT=ON
159
-DENABLE_NFS=ON
160
-DENABLE_OPTICAL=ON
161
-DENABLE_SMBCLIENT=ON
162
-DENABLE_UDEV=ON
163
-DENABLE_UPNP=ON
164
-DENABLE_VAAPI=ON
165
-DENABLE_VDPAU=ON
166
-DENABLE_XSLT=ON
167
-DENABLE_LIRCCLIENT=ON
168
-DENABLE_INTERNAL_RapidJSON=OFF
169
-DENABLE_INTERNAL_FFMPEG=ON
170
-DENABLE_INTERNAL_CROSSGUID=ON
171
-DENABLE_INTERNAL_FSTRCMP=ON
172
-DENABLE_INTERNAL_FLATBUFFERS=ON
173
-DENABLE_INTERNAL_UDFREAD=ON
174
-DENABLE_SSE=ON -DENABLE_SSE2=ON -DENABLE_SSE3=ON -DENABLE_SSSE3=ON
175
-DENABLE_SSE4_1=ON -DENABLE_SSE4_2=ON -DENABLE_AVX=ON -DENABLE_AVX2=ON
176
-Dlibdvdcss_URL="$srcdir/libdvdcss-$_libdvdcss_version.tar.gz"
177
-Dlibdvdnav_URL="$srcdir/libdvdnav-$_libdvdnav_version.tar.gz"
178
-Dlibdvdread_URL="$srcdir/libdvdread-$_libdvdread_version.tar.gz"
179
-DFFMPEG_URL="$srcdir/ffmpeg-$_ffmpeg_version.tar.xz"
180
-DCROSSGUID_URL="$srcdir/crossguid-$_crossguid_version.tar.gz"
181
-DFSTRCMP_URL="$srcdir/fstrcmp-$_fstrcmp_version.tar.gz"
182
-DFLATBUFFERS_URL="$srcdir/flatbuffers-$_flatbuffers_version.tar.gz"
183
-DUDFREAD_URL="$srcdir/libudfread-$_libudfread_version.tar.bz2"
184
-DAPP_RENDER_SYSTEM=$_renderer
185
)
186
187
echo "building kodi"
188
cmake "${_args[@]}" ../"$_gitname"
189
make
190
}
191
192
# kodi
193
# components: kodi
194
package_kodi-git() {
195
pkgdesc="A software media player and entertainment hub for digital media (master branch, $_renderer renderer)"
196
depends=(
197
'bluez-libs' 'curl' 'dav1d' 'desktop-file-utils' 'hicolor-icon-theme' 'fmt'
198
'lcms2' 'libass' 'libbluray' 'libcdio' 'libcec' 'libmicrohttpd' 'libnfs'
199
'libpulse' 'libva' 'libvdpau' 'libxslt' 'lirc' 'lzo'
200
'mariadb-libs' 'mesa' 'libpipewire' 'python-pillow' 'python-pycryptodomex'
201
'python-simplejson' 'smbclient' 'sndio' 'spdlog' 'sqlite'
202
'tinyxml' 'taglib' 'libxrandr' 'libxkbcommon' 'waylandpp' 'libinput'
203
'pcre' 'tinyxml2' 'libdisplay-info' 'exiv2'
204
)
205
[[ -n "$_clangbuild" ]] && depends+=('glu')
206
207
optdepends=(
208
'bluez: Blutooth support'
209
'python-pybluez: Bluetooth support'
210
'pulseaudio: PulseAudio support'
211
'pipewire: PipeWire support'
212
'upower: Display battery level'
213
)
214
provides=("kodi-common=${pkgver}" 'kodi-x11' 'kodi-wayland' 'kodi-gbm' 'kodi')
215
conflicts=('kodi' 'kodi-gles' 'kodi-x11' 'kodi-wayland' 'kodi-gbm')
216
217
_components=(
218
'kodi'
219
'kodi-bin'
220
)
221
222
cd kodi-build
223
for _cmp in ${_components[@]}; do
224
DESTDIR="$pkgdir" /usr/bin/cmake \
225
-DCMAKE_INSTALL_COMPONENT="$_cmp" \
226
-P cmake_install.cmake
227
done
228
229
# avoid error <general>: GetDirectory - Error getting /usr/lib/kodi/addons
230
# https://bugs.archlinux.org/task/77366
231
mkdir -p "$pkgdir"/usr/lib/kodi/addons
232
233
# https://gitlab.archlinux.org/archlinux/packaging/packages/kodi/-/issues/2
234
mkdir -p "$pkgdir"/usr/share/kodi/system/certs
235
ln -s /etc/ssl/cert.pem "$pkgdir"/usr/share/kodi/system/certs/cacert.pem
236
237
}
238
239
# kodi-eventclients
240
# components: kodi-eventclients-common kodi-eventclients-ps3 kodi-eventclients-kodi-send
241
package_kodi-git-eventclients() {
242
pkgdesc="Kodi Event Clients (master branch)"
243
provides=("kodi-eventclients=${pkgver}")
244
conflicts=('kodi-eventclients')
245
optdepends=(
246
'kodi: local machine eventclient use'
247
'python: most eventclients are implemented in python'
248
)
249
250
_components=(
251
'kodi-eventclients-common'
252
'kodi-eventclients-ps3'
253
'kodi-eventclients-kodi-send'
254
)
255
256
cd kodi-build
257
for _cmp in ${_components[@]}; do
258
DESTDIR="$pkgdir" /usr/bin/cmake \
259
-DCMAKE_INSTALL_COMPONENT="$_cmp" \
260
-P cmake_install.cmake
261
done
262
}
263
264
# kodi-tools-texturepacker
265
# components: kodi-tools-texturepacker
266
package_kodi-git-tools-texturepacker() {
267
pkgdesc="Kodi Texturepacker tool (master branch)"
268
provides=("kodi-tools-texturepacker=${pkgver}")
269
conflicts=('kodi-tools-texturepacker')
270
depends=('libpng' 'giflib' 'libjpeg-turbo' 'lzo')
271
272
_components=(
273
'kodi-tools-texturepacker'
274
)
275
276
cd kodi-build
277
for _cmp in ${_components[@]}; do
278
DESTDIR="$pkgdir" /usr/bin/cmake \
279
-DCMAKE_INSTALL_COMPONENT="$_cmp" \
280
-P cmake_install.cmake
281
done
282
}
283
284
# kodi-dev
285
# components: kodi-addon-dev kodi-eventclients-dev
286
package_kodi-git-dev() {
287
pkgdesc="Kodi dev files (master branch)"
288
provides=("kodi-dev=${pkgver}")
289
conflicts=('kodi-dev')
290
291
_components=(
292
'kodi-addon-dev'
293
'kodi-eventclients-dev'
294
)
295
296
cd kodi-build
297
for _cmp in ${_components[@]}; do
298
DESTDIR="$pkgdir" /usr/bin/cmake \
299
-DCMAKE_INSTALL_COMPONENT="$_cmp" \
300
-P cmake_install.cmake
301
done
302
}
303
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |
| 2026-07-15 00:09:25 | LOW | 2 |