mingw-w64-libvpx

MEDIUM
maintainer kfg 5 votes scanned 2026-09-23 21:40:52.517030
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:13 source=(git+https://chromium.googlesource.com/webm/libvpx#tag=${_tag}

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Karl-Felix Glatzer <karl.glatzer@gmx.de>
2pkgname=mingw-w64-libvpx
3pkgver=1.17.0
4pkgrel=1
5pkgdesc="VP8 and VP9 codec (mingw-w64)"
6arch=('any')
7url="http://www.webmproject.org/"
8license=('custom:BSD')
9depends=('mingw-w64-crt')
10options=(!strip !buildflags staticlibs !debug)
11makedepends=('mingw-w64-gcc' 'yasm' 'git')
12_tag=82615ff0733cd4063838c352bc2e2ab225f37ade
13source=(git+https://chromium.googlesource.com/webm/libvpx#tag=${_tag}
14 # patches from MSYS2 (https://github.com/msys2/MINGW-packages/tree/master/mingw-w64-libvpx)
15 '0001-enable-shared-on.mingw.patch'
16 '0005-fix-exports.mingw.patch')
17b2sums=('df306f55209c8761336d9139e9ecfc04a20f68da4fca2a0b8ae2d2318d19af4d46cd5272f2c826f3c492129689ec98f4399942c7e56c61ba02e6696800904ecd'
18 '717394b571a5fa8325cd64092886e2f013facde7bea08aef4f8361e97e10fd2c9ffc93ab8d070ab2f16e994766206e9ba39e793b7852e5b70f426b50fb9e63f1'
19 '89024d854bf3fd514b2c219f133f2fc82bdab22158b74da90053c3a3812c148f6b43e7061d179ab8dbc0e6c441a23f95499a00180fb52b20effb9ba2504f00a8')
20_architectures="${MINGW_W64_ARCHS:-x86_64-w64-mingw32}"
21
22pkgver() {
23 cd libvpx
24
25 git describe --tags | sed 's/^v//'
26}
27
28prepare() {
29 cd ${srcdir}/libvpx
30
31 patch -Np1 -i "${srcdir}/0001-enable-shared-on.mingw.patch"
32 patch -Np1 -i "${srcdir}/0005-fix-exports.mingw.patch"
33}
34
35build() {
36 for _arch in ${_architectures}; do
37 mkdir -p ${srcdir}/libvpx/build-${_arch} && cd ${srcdir}/libvpx/build-${_arch}
38
39 unset EXTRA_CFLAGS
40
41 if [ ${_arch} = "i686-w64-mingw32" ]; then
42 _targetarch="x86-win32-gcc"
43 EXTRA_CFLAGS="-mstackrealign"
44 else
45 _targetarch="x86_64-win64-gcc"
46 fi
47
48 CFLAGS="$EXTRA_CFLAGS $CFLAGS -fno-asynchronous-unwind-tables" CROSS="${_arch}-" ../configure \
49 --prefix=/usr/${_arch} \
50 --target=${_targetarch} \
51 --disable-docs \
52 --disable-install-docs \
53 --disable-install-srcs \
54 --disable-unit-tests \
55 --enable-pic \
56 --enable-postproc \
57 --enable-runtime-cpu-detect \
58 --enable-shared \
59 --enable-vp8 \
60 --enable-vp9 \
61 --enable-vp9-highbitdepth \
62 --enable-vp9-temporal-denoising
63
64 make
65 done
66}
67
68package() {
69 for _arch in ${_architectures}; do
70 cd ${srcdir}/libvpx/build-${_arch}
71 make DIST_DIR="$pkgdir/usr/${_arch}" install
72
73 ${_arch}-strip -s ${pkgdir}/usr/${_arch}/bin/*.exe
74 ${_arch}-strip -g --strip-unneeded ${pkgdir}/usr/${_arch}/bin/*.dll
75 ${_arch}-strip -g ${pkgdir}/usr/${_arch}/lib/*.a
76 done
77
78 cd ${srcdir}/libvpx
79
80 install -Dm 644 LICENSE -t "${pkgdir}"/usr/share/licenses/${pkgname}/
81}
82
83# vim: ts=2 sw=2 et:
84

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-09-23 21:40
@@ -1,6 +1,6 @@
# Maintainer: Karl-Felix Glatzer <karl.glatzer@gmx.de>
pkgname=mingw-w64-libvpx
-pkgver=1.16.0
+pkgver=1.17.0
pkgrel=1
pkgdesc="VP8 and VP9 codec (mingw-w64)"
arch=('any')
@@ -9,15 +9,15 @@
depends=('mingw-w64-crt')
options=(!strip !buildflags staticlibs !debug)
makedepends=('mingw-w64-gcc' 'yasm' 'git')
-_tag=04def0a07f8bfa95785e30e6db95036cda17f9b2
+_tag=82615ff0733cd4063838c352bc2e2ab225f37ade
source=(git+https://chromium.googlesource.com/webm/libvpx#tag=${_tag}
# patches from MSYS2 (https://github.com/msys2/MINGW-packages/tree/master/mingw-w64-libvpx)
'0001-enable-shared-on.mingw.patch'
'0005-fix-exports.mingw.patch')
-b2sums=('aebe079b448e4c1e0bb084d380266dde054800d0fcff3286e6de09d35365aa99eeeb9068ba22a532184c90abb6e8fa6109719ea48463b5d28d9a57a35f83e0a4'
+b2sums=('df306f55209c8761336d9139e9ecfc04a20f68da4fca2a0b8ae2d2318d19af4d46cd5272f2c826f3c492129689ec98f4399942c7e56c61ba02e6696800904ecd'
'717394b571a5fa8325cd64092886e2f013facde7bea08aef4f8361e97e10fd2c9ffc93ab8d070ab2f16e994766206e9ba39e793b7852e5b70f426b50fb9e63f1'
'89024d854bf3fd514b2c219f133f2fc82bdab22158b74da90053c3a3812c148f6b43e7061d179ab8dbc0e6c441a23f95499a00180fb52b20effb9ba2504f00a8')
-_architectures="i686-w64-mingw32 x86_64-w64-mingw32"
+_architectures="${MINGW_W64_ARCHS:-x86_64-w64-mingw32}"
pkgver() {
cd libvpx

Scan history

Scanned at (UTC)SeverityRules
2026-09-23 21:40:52 Medium 1
2026-06-19 19:07:35 Clean 2
2026-06-18 16:11:54 Medium 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion