nvidia-beta

LOW

maintainer dbermond 350 votes scanned 2026-10-03 00:23:04.761738

View on AUR

Why flagged

The package downloads a prebuilt NVIDIA driver from an official NVIDIA domain (us.download.nvidia.com), which is a standard and trusted source for this software; the non-whitelisted host is a minor concern but does not imply risk given the official nature of the domain and the expected binary driver distribution model.

Triggered rules

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt NVIDIA driver from an official NVIDIA domain (us.download.nvidia.com), which is a standard and trusted source for this software; the non-whitelisted host is a minor concern but does not imply risk given the official nature of the domain and the expected binary driver distribution model.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:20 source=("http://us.download.nvidia.com/XFree86/Linux-${CARCH}/${pkgver}/${_pkg}.run"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer : Daniel Bermond <dbermond@archlinux.org>
    
      2# Contributor: Det <nimetonmaili g-mail>
    
      3# Contributor: Ng Oon-Ee
    
      4# Contributor: Dan Vratil
    
      5
    
      6pkgname=nvidia-beta
    
      7pkgver=615.71.09
    
      8pkgrel=1
    
      9pkgdesc="NVIDIA kernel module (beta version)"
    
      10arch=('x86_64')
    
      11url='https://www.nvidia.com/'
    
      12license=('LicenseRef-Custom')
    
      13makedepends=(
    
      14    'dkms'
    
      15    'linux-headers')
    
      16provides=("nvidia=${pkgver}" "nvidia-beta=${pkgver}" 'NVIDIA-MODULE')
    
      17conflicts=('nvidia')
    
      18options=('!strip')
    
      19_pkg="NVIDIA-Linux-${CARCH}-${pkgver}-no-compat32"
    
      20source=("http://us.download.nvidia.com/XFree86/Linux-${CARCH}/${pkgver}/${_pkg}.run"
    
      21        '110-nvidia-change-dkms-conf.patch')
    
      22sha256sums=('e5545862c291f3991a91ee40dd9c7a71cccc69247a193d5e5b891bfd964ac104'
    
      23            '5a94430787c3e75c896af0a2af616491ec71ea60cc999f90fb5f17d9f0fe07ac')
    
      24
    
      25prepare() {
    
      26    # extract the source file
    
      27    [ -d "$_pkg" ] && rm -rf "$_pkg"
    
      28    printf '%s\n' "  -> Self-Extracting ${_pkg}.run..."
    
      29    sh "${_pkg}.run" --extract-only
    
      30    ln -s kernel "${_pkg}/nvidia-${pkgver}"
    
      31    
    
      32    patch -d "$_pkg" -Np1 -i "${srcdir}/110-nvidia-change-dkms-conf.patch"
    
      33}
    
      34
    
      35build() {
    
      36    fakeroot dkms build --dkmstree "$srcdir" --sourcetree "${srcdir}/${_pkg}" -m "nvidia/${pkgver}" -k "$(</usr/src/linux/version)"
    
      37}
    
      38
    
      39package() {
    
      40    depends=(
    
      41        'libglvnd'
    
      42        'linux'
    
      43        "nvidia-utils-beta=${pkgver}")
    
      44    
    
      45    local _kernver
    
      46    _kernver="$(</usr/src/linux/version)"
    
      47    
    
      48    install -D -m644 "nvidia/${pkgver}/${_kernver}/${CARCH}/module"/* -t "${pkgdir}/usr/lib/modules/${_kernver}/extramodules"
    
      49    install -D -m644 "${_pkg}/LICENSE" -t "${pkgdir}/usr/share/licenses/${pkgname}"
    
      50    find "$pkgdir" -name '*.ko' -exec zstd --rm -19 {} +
    
      51}
    
      52

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-03 00:23:04	Low	2
2026-10-02 00:00:32	Low	2
2026-10-01 00:02:06	Low	2
2026-09-30 00:20:07	Low	2
2026-09-29 00:07:46	Low	2
2026-09-28 00:28:32	Low	2
2026-09-27 00:07:07	Low	2
2026-09-26 00:12:15	Low	2
2026-09-25 00:03:36	Low	2
2026-09-24 00:24:14	Low	2
2026-09-23 00:28:13	Low	2
2026-09-22 00:15:14	Low	2
2026-09-21 00:26:32	Low	2
2026-09-20 00:25:31	Low	2
2026-09-19 00:25:36	Low	2
2026-09-18 00:17:11	Low	2
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2