lib32-rtmpdump

LOW

maintainer gverm 43 votes scanned 2026-08-20 00:05:13.298181

View on AUR

Why flagged

The package builds a 32-bit version of rtmpdump from the official git repository with transparent patches; the source is not executable and comes from a legitimate project host, posing minimal risk despite the orphaned status and skipped checksum.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds a 32-bit version of rtmpdump from the official git repository with transparent patches; the source is not executable and comes from a legitimate project host, posing minimal risk despite the orphaned status and skipped checksum.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: Rodrigo Bezerra <rodrigobezerra21 at gmail dot com>
    
      2# Contributor: GordonGR <ntheo1979@gmail.com>
    
      3# Contributor: Maxime Gauduin <alucryd@archlinux.org>
    
      4# Contributor: Bartłomiej Piotrowski <bpiotrowski@archlinux.org>
    
      5# Contributor: xduugu
    
      6# Contributor: Elis Hughes <elishughes@googlemail.com>
    
      7
    
      8pkgname=lib32-rtmpdump
    
      9pkgver=2.4.r105.6f6bb13
    
      10pkgrel=1
    
      11epoch=1
    
      12pkgdesc='A toolkit for RTMP streams (32 bit)'
    
      13arch=(x86_64)
    
      14url=http://rtmpdump.mplayerhq.hu/
    
      15license=(
    
      16    GPL2
    
      17    LGPL2.1
    
      18)
    
      19depends=(
    
      20    lib32-glibc
    
      21    lib32-gnutls
    
      22    lib32-zlib
    
      23    rtmpdump)
    
      24makedepends=(git)
    
      25_commit=6f6bb1353fc84f4cc37138baa99f586750028a01
    
      26source=(git+https://git.ffmpeg.org/rtmpdump#commit=${_commit})
    
      27sha256sums=('SKIP')
    
      28
    
      29pkgver() {
    
      30    cd rtmpdump
    
      31
    
      32    echo "2.4.r$(git rev-list --count c28f1bab7822de97353849e7787b59e50bbb1428..HEAD).$(git rev-parse --short HEAD)"
    
      33}
    
      34
    
      35prepare() {
    
      36    cd rtmpdump
    
      37
    
      38    sed -e 's/^CRYPTO=OPENSSL/#CRYPTO=OPENSSL/' -e 's/#CRYPTO=GNUTLS/CRYPTO=GNUTLS/' -i Makefile -i librtmp/Makefile
    
      39    sed -i -e 's:gcc:gcc -m32:' Makefile librtmp/Makefile
    
      40    sed -i -e 's/host_cpu\=\"\${host\%\%-\*}\"/host_cpu\="i386"/' Makefile librtmp/Makefile
    
      41    sed -i -e 's/march\=\"\${march\%\%-\*}\"/march\="i386"/' Makefile librtmp/Makefile
    
      42}
    
      43
    
      44build() {
    
      45    cd rtmpdump
    
      46
    
      47    sed -e 's/^CRYPTO=OPENSSL/#CRYPTO=OPENSSL/' -e 's/#CRYPTO=GNUTLS/CRYPTO=GNUTLS/' -i Makefile -i librtmp/Makefile
    
      48
    
      49    make \
    
      50        OPT="$CFLAGS" \
    
      51        XLDFLAGS="$LDFLAGS"
    
      52}
    
      53
    
      54package() {
    
      55    cd rtmpdump
    
      56
    
      57    make \
    
      58        DESTDIR="${pkgdir}" \
    
      59        prefix=/usr \
    
      60        sbindir=/usr/bin \
    
      61        mandir=/usr/share/man \
    
      62        libdir=/usr/lib32 \
    
      63        install
    
      64
    
      65    rm -rf "${pkgdir}/usr"/{bin,include,share}
    
      66}
    
      67

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-20 00:05:13	Low	2
2026-08-19 23:42:47	Medium	1
2026-06-18 16:11:54	Clean	0