lightos-codec-ffmpeg-bin

LOW

maintainer czyt 0 votes scanned 2026-10-23 07:37:02.440193

View on AUR

Why flagged

The package downloads a prebuilt binary from a GitHub release, which is not whitelisted but plausibly the project's official source; the binary is validated against a checksum and a Python script checks its architecture and codec compatibility, reducing risk; the install hook safely restarts a service only if already running.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from a GitHub release, which is not whitelisted but plausibly the project's official source; the binary is validated against a checksum and a Python script checks its architecture and codec compatibility, reducing risk; the install hook safely restarts a service only if already running.

PKGBUILD

      1# Maintainer: ca-x <https://github.com/ca-x>
    
      2pkgname=lightos-codec-ffmpeg-bin
    
      3pkgver=0.1.12
    
      4pkgrel=1
    
      5pkgdesc='Optional Arch-native FFmpeg hardware H.264 worker for LightOS remote desktop'
    
      6arch=('x86_64')
    
      7url='https://github.com/ca-x/lightos-remote-desktop'
    
      8license=('MIT' 'BSD-2-Clause' 'BSD-3-Clause' 'IJG' 'Zlib' 'WTFPL')
    
      9depends=('glibc' 'libgcc' 'libstdc++' 'ffmpeg' 'libavcodec.so=63-64'
    
      10         'libavutil.so=61-64' 'libswscale.so=10-64')
    
      11makedepends=('python' 'binutils')
    
      12optdepends=('lightos-remoted-bin: Remote desktop service that discovers this optional worker')
    
      13provides=("lightos-codec-ffmpeg=$pkgver")
    
      14conflicts=('lightos-codec-ffmpeg')
    
      15options=('!strip' '!debug')
    
      16install=lightos-codec-ffmpeg-bin.install
    
      17_bundle=lightos-codec-ffmpeg-linux-x86_64-archlinux
    
      18source=('lightos-codec-ffmpeg-bin.install' 'validate-arch-codec.py')
    
      19sha256sums=('57819d8658719114e59247776cf769046de25dd43ad2d99fbfef155a2c9ad3a7'
    
      20            'b1a16652f3ffef6185f0636da9c6fc9bbc665ffb9c0a7dc98776373b1b4b1a91')
    
      21sha256sums_x86_64=('22d12ed04bdc739f9729421e91e769f17b9d4805e9dea41f7a3af402b43febb6'
    
      22                   '39ecb67a328e698536b98451f92f04fadb5706187b2470f3f2fdb7adbde9b198')
    
      23source_x86_64=("${_bundle}-${pkgver}.tar.gz::${url}/releases/download/v${pkgver}/${_bundle}.tar.gz"
    
      24               "${_bundle}-${pkgver}.tar.gz.sha256::${url}/releases/download/v${pkgver}/${_bundle}.tar.gz.sha256")
    
      25
    
      26prepare() {
    
      27    local expected
    
      28    expected=$(awk -v name="${_bundle}.tar.gz" '$2 == name && $1 ~ /^[0-9a-f]+$/ && length($1)==64 { print $1 }' "${_bundle}-${pkgver}.tar.gz.sha256")
    
      29    [[ $expected =~ ^[0-9a-f]{64}$ ]] || return 1
    
      30    printf '%s  %s\n' "$expected" "${_bundle}-${pkgver}.tar.gz" | sha256sum --check --status || return 1
    
      31    python "$srcdir/validate-arch-codec.py" "$srcdir/$_bundle" || return 1
    
      32}
    
      33
    
      34package() {
    
      35    install -Dm755 "${_bundle}/lightos-codec-ffmpeg" "$pkgdir/usr/lib/lightos-remoted/lightos-codec-ffmpeg"
    
      36    install -d "$pkgdir/usr/bin" "$pkgdir/usr/share/licenses/$pkgname" "$pkgdir/usr/share/doc/$pkgname"
    
      37    ln -s /usr/lib/lightos-remoted/lightos-codec-ffmpeg "$pkgdir/usr/bin/lightos-codec-ffmpeg"
    
      38    install -m644 "${_bundle}/LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      39    cp -a "${_bundle}/licenses/." "$pkgdir/usr/share/licenses/$pkgname/"
    
      40    install -m644 "${_bundle}/README.md" "${_bundle}/dependencies.txt" "${_bundle}/ffmpeg-abi.txt" "${_bundle}/abi.json" "$pkgdir/usr/share/doc/$pkgname/"
    
      41}
    
      42

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-23 07:37:02	Low	2
2026-10-23 05:36:55	Low	2