obs-plugin-shadertastic-bin

MEDIUM

maintainer orphaned 0 votes scanned 2026-09-05 22:01:36.851925

View on AUR

Why flagged

The package installs a prebuilt binary .deb from GitHub releases without source compilation, creating a supply-chain risk if the release artifact is compromised.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review of an ambiguous pattern llm_review

The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it MEDIUM (confidence 95%): The package installs a prebuilt binary .deb from GitHub releases without source compilation, creating a supply-chain risk if the release artifact is compromised.

PKGBUILD

      1# shellcheck disable=SC2034,SC2148,SC2154
    
      2
    
      3# Maintainer: Mylloon <aur@mylloon.fr>
    
      4
    
      5_pkgname=obs-plugin-shadertastic
    
      6pkgname="${_pkgname}"-bin
    
      7pkgdesc="An OBS plugin to add amazing effects for your stream"
    
      8pkgver=1.2.0
    
      9pkgrel=1
    
      10
    
      11arch=("x86_64")
    
      12url="https://github.com/xurei/shadertastic"
    
      13license=('GPL-2.0')
    
      14
    
      15depends=('obs-studio')
    
      16
    
      17provides=("${_pkgname}=${pkgver}")
    
      18
    
      19source=("https://github.com/xurei/shadertastic/releases/download/$pkgver/shadertastic-$pkgver-x86_64-linux-gnu.deb")
    
      20sha256sums=('ee131d96294d5be3e37cc27bbbb7d2d42ff5b766144106dedf0d7085f547e850')
    
      21
    
      22options=(!debug)
    
      23
    
      24package() {
    
      25  bsdtar -xf "${srcdir}"/data.tar.gz -C "${pkgdir}"/
    
      26  cd "${pkgdir}"/usr/lib/ || exit
    
      27  mv x86_64-linux-gnu/obs-plugins .
    
      28  rm -r x86_64-linux-gnu
    
      29  chown root:root -vR "${pkgdir}/"
    
      30}
    
      31

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-05 22:01:36	Medium	2