librealsense
The package downloads firmware binaries from Intel's official librealsense domain, which is a legitimate source for the project; while the domain is not a standard GitHub release host, it is project-specific and trusted, and the files are firmware data, not executable code, so the risk is low.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads firmware binaries from Intel's official librealsense domain, which is a legitimate source for the project; while the domain is not a standard GitHub release host, it is project-specific and trusted, and the files are firmware data, not executable code, so the risk is low.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:17
"https://librealsense.intel.com/Releases/RS4xx/FW/D4XX_FW_Image-${_RS4XX_VER}.bin"
PKGBUILD
1 offending line(s) highlighted# Maintainer: pingplug < aur at pingplug dot me >
# Contributr: Patrick José Pereira < positivcheg94 at gmail dot com >
_RS4XX_VER=5.17.0.10
_L51X_VER=1.5.8.1
pkgname=librealsense
pkgver=2.58.1
pkgrel=1
pkgdesc="RealSense SDK 2.0 is a cross-platform library for RealSense depth cameras. The SDK allows depth and color streaming, and provides intrinsic and extrinsic calibration information."
arch=('x86_64')
url="https://github.com/realsenseai/librealsense"
license=('Apache')
makedepends=('cmake' 'git')
depends=('glfw' 'glu' 'gtk3' 'libusb')
source=("https://github.com/realsenseai/librealsense/archive/refs/tags/v${pkgver}.tar.gz"
"https://librealsense.intel.com/Releases/RS4xx/FW/D4XX_FW_Image-${_RS4XX_VER}.bin"
"https://librealsense.intel.com/Releases/L5xx/FW/L51X_FW_Image-${_L51X_VER}.bin"
"realsense-viewer.desktop"
"0000-Fix-glibc-detection-probe.patch"
"0001-Fix-glibc-detection-probe.patch")
sha256sums=('14409c3b810bf1508b87f46d47608a89018743b8a73d5855ab5d1ad18763fd8c'
'a7e10cf7b011929df2bfc6347d87471372621cc937c96cb529c3846f26b60f1c'
'87a9a91b613d9d807b2bfc424abe9cac63cad75dfc04718592c44777cb0b4452'
'59281f91e7d471a7dde1cf7207eddd8624e05218cc4301ee52e4c453a0c8ab21'
'dbde38fc466256c365c0f64d18db23ad930c196edb1475ca691c2479a03e74d0'
'9b9e3294c7bb084404ec88595fafe3f704b657e70b0daf67dd330a531c76338d')
prepare(){
cd "${srcdir}/${pkgname}-${pkgver}"
patch -Np1 -i "${srcdir}/0000-Fix-glibc-detection-probe.patch"
patch -Np1 -i "${srcdir}/0001-Fix-glibc-detection-probe.patch"
sed -i 's|, GROUP:="plugdev"||g' "config/99-realsense-libusb.rules"
sed -i 's|, GROUP="plugdev"||g' "config/99-realsense-libusb.rules"
mkdir -p build/common/fw/
cp "../D4XX_FW_Image-${_RS4XX_VER}.bin" build/common/fw/
cp "../L51X_FW_Image-${_L51X_VER}.bin" build/common/fw/
}
build() {
cd "${srcdir}/${pkgname}-${pkgver}"
mkdir -p build && cd build
CFLAGS="${CFLAGS} -Wformat -pthread" \
CXXFLAGS="${CXXFLAGS} -Wformat -pthread" \
unset HOME
cmake .. \
-DCMAKE_INSTALL_PREFIX=/usr \
-DCMAKE_INSTALL_LIBDIR=lib \
-DCMAKE_INSTALL_SBINDIR=bin \
-DCMAKE_INSTALL_SYSCONFDIR=/etc \
-DCMAKE_BUILD_TYPE=Release \
-DBUILD_SHARED_LIBS=on \
-DBUILD_WITH_STATIC_CRT=off \
-DBUILD_WITH_OPENMP=on \
-DBUILD_EXAMPLES=on \
-DBUILD_TOOLS=on \
-DCHECK_FOR_UPDATES=off
make
}
package() {
cd "${srcdir}/${pkgname}-${pkgver}/build"
DESTDIR="${pkgdir}" make install
install -dm755 "${pkgdir}/usr/share"
mv "${pkgdir}/Documents/librealsense2" "${pkgdir}/usr/share"
rmdir "${pkgdir}/Documents"
cd "${srcdir}/${pkgname}-${pkgver}"
# Install udev rules
install -Dm644 "config/99-realsense-libusb.rules" "${pkgdir}/usr/lib/udev/rules.d/99-realsense-libusb.rules"
install -Dm644 "config/99-realsense-d4xx-mipi-dfu.rules" "${pkgdir}/usr/lib/udev/rules.d/99-realsense-d4xx-mipi-dfu.rules"
install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
install -Dm644 common/res/icon_512.png "${pkgdir}/usr/share/pixmaps/realsense-viewer.png"
install -Dm644 "$srcdir/realsense-viewer.desktop" "${pkgdir}/usr/share/applications/realsense-viewer.desktop"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |