obs-streamfx-bin

MEDIUM
maintainer Network_Jack 0 votes scanned 2026-08-21 00:01:35.148225
View on AUR
Why flagged

The package installs a prebuilt binary from a GitHub release by a third party (not the official project), which is an unverifiable executable from a potentially swappable source, creating a supply-chain risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review of an ambiguous pattern llm_review

The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it MEDIUM (confidence 95%): The package installs a prebuilt binary from a GitHub release by a third party (not the official project), which is an unverifiable executable from a potentially swappable source, creating a supply-chain risk.

PKGBUILD

1# Maintainer: Network Jack <Network_Jack@null.net>
2pkgname=obs-streamfx-bin
3pkgver=0.12.0b372
4pkgrel=1
5pkgdesc="Bring your stream back to life with modern effects! (Binaries)"
6arch=("x86_64" "x86_64_v3")
7url="https://github.com/InspecteurKepler/obs-StreamFX-free"
8license=('GPL')
9depends=("ffmpeg" "jansson" "libxinerama" "libxkbcommon-x11"
10 "qt6-base" "curl" "gtk-update-icon-cache"
11 "obs-studio>=29" "nlohmann-json")
12provides=('obs-streamfx')
13conflicts=('obs-streamfx' 'obs-streamfx-git' 'obs-streamfx-unstable')
14source=("https://github.com/InspecteurKepler/obs-StreamFX-free/releases/download/${pkgver}/streamfx--0.12.0b372-g40807170-Clang.7z")
15sha256sums=('4aeff24b6c7aab6620c0d6bb34129c8df2649889274fce9213d1365310bde610')
16
17package() {
18 cd "plugins"
19
20 install -D -m 755 StreamFX/bin/64bit/StreamFX.so "${pkgdir}/usr/lib/obs-plugins/StreamFX.so"
21
22 mkdir -p "$pkgdir"/usr/share/obs/obs-plugins/StreamFX
23 cp -R StreamFX/data/* "$pkgdir"/usr/share/obs/obs-plugins/StreamFX
24 chmod u=rwX,g=rX,o=rX "$pkgdir"/usr/share/obs/obs-plugins/StreamFX/*/**/*
25}
26

Scan history

Scanned at (UTC)SeverityRules
2026-08-21 00:01:35 Medium 2
2026-08-20 23:13:41 Medium 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion