nvidia-beta-dkms

LOW

maintainer dbermond 71 votes scanned 2026-11-01 00:21:48.120785

View on AUR

Why flagged

The package downloads a self-extracting installer from an official NVIDIA domain (us.download.nvidia.com), which is standard for NVIDIA drivers on the AUR; the source is not executed remotely, and the build process involves unpacking and patching official kernel modules, posing no inherent security risk.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a self-extracting installer from an official NVIDIA domain (us.download.nvidia.com), which is standard for NVIDIA drivers on the AUR; the source is not executed remotely, and the build process involves unpacking and patching official kernel modules, posing no inherent security risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:23 source=("https://us.download.nvidia.com/XFree86/Linux-${CARCH}/${pkgver}/${_pkg}.run"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer : Daniel Bermond <dbermond@archlinux.org>
    
      2# Contributor: Sibren Vasse <arch at sibrenvasse dot nl>
    
      3# Contributor: Matt Welch <matt dot welch at gmail dot com>
    
      4# Contributor: Anish Bhatt <anish at gatech dot edu>
    
      5# Contributor: Det <nimetonmaili gmail a-dot com>
    
      6# Contributor: Alucryd <alucryd at gmail dot com>
    
      7# Contributor: Jason Melton <jason dot melton at gmail dot com>
    
      8# Contributor: Youpi <max dot flocard at gmail dot com>
    
      9# Contributor: sl1pkn07 <sl1pkn07 at gmail dot com>
    
      10
    
      11pkgname=nvidia-beta-dkms
    
      12pkgver=615.71.09
    
      13pkgrel=1
    
      14pkgdesc='NVIDIA kernel modules - module sources (beta version)'
    
      15arch=('x86_64')
    
      16url='https://www.nvidia.com/'
    
      17license=('LicenseRef-custom')
    
      18provides=("nvidia=${pkgver}" "nvidia-dkms=${pkgver}" "nvidia-beta=${pkgver}"
    
      19          'NVIDIA-MODULE')
    
      20conflicts=('nvidia' 'nvidia-dkms')
    
      21options=('!strip')
    
      22_pkg="NVIDIA-Linux-${CARCH}-${pkgver}-no-compat32"
    
      23source=("https://us.download.nvidia.com/XFree86/Linux-${CARCH}/${pkgver}/${_pkg}.run"
    
      24        '110-nvidia-change-dkms-conf.patch'
    
      25        '120-nvidia-linux-rt-gift.patch')
    
      26sha256sums=('e5545862c291f3991a91ee40dd9c7a71cccc69247a193d5e5b891bfd964ac104'
    
      27            '5a94430787c3e75c896af0a2af616491ec71ea60cc999f90fb5f17d9f0fe07ac'
    
      28            '291bc6568e18496a4c2e732fd8616f6d536d8e9f3ab51f1959e3fc08f0de126b')
    
      29
    
      30prepare() {
    
      31    # extract the source file
    
      32    [ -d "$_pkg" ] && rm -rf "$_pkg"
    
      33    printf '%s\n' "  -> Self-Extracting ${_pkg}.run..."
    
      34    sh "${_pkg}.run" --extract-only
    
      35    
    
      36    patch -d "$_pkg" -Np1 -i "${srcdir}/110-nvidia-change-dkms-conf.patch"
    
      37    patch -d "$_pkg" -Np1 -i "${srcdir}/120-nvidia-linux-rt-gift.patch"
    
      38}
    
      39
    
      40package() {
    
      41    depends=(
    
      42        'dkms'
    
      43        'libglvnd'
    
      44        "nvidia-utils-beta=${pkgver}")
    
      45    
    
      46    install -d -m755 "${pkgdir}/usr/src"
    
      47    cp -dr --no-preserve='ownership' "${_pkg}/kernel" "${pkgdir}/usr/src/nvidia-${pkgver}"
    
      48    install -D -m644 "${_pkg}/LICENSE" -t "${pkgdir}/usr/share/licenses/${pkgname}"
    
      49}
    
      50

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-01 00:21:48	Low	2
2026-10-31 00:07:41	Low	2
2026-10-30 00:29:30	Low	2
2026-10-29 00:13:55	Low	2
2026-10-28 00:06:54	Low	2
2026-10-27 00:23:28	Low	2
2026-10-26 00:12:40	Low	2
2026-10-25 00:20:48	Low	2
2026-10-24 00:14:55	Low	2
2026-10-23 00:02:19	Low	2
2026-10-22 00:13:10	Low	2
2026-10-21 00:12:50	Low	2
2026-10-20 00:10:31	Low	2
2026-10-19 00:03:55	Low	2
2026-10-18 00:06:55	Low	2
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2