obs-studio-browser
maintainer tytan652
· 32 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The source URLs are from the official project's CDN (cdn-fastly.obsproject.com), which is a legitimate and expected host for OBS Studio's CEF binary; the package builds from official git sources and the binary is used as a dependency, not executed remotely.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source URLs are from the official project's CDN (cdn-fastly.obsproject.com), which is a legitimate and expected host for OBS Studio's CEF binary; the package builds from official git sources and the binary is used as a dependency, not executed remotely.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:115
source_x86_64=("https://cdn-fastly.obsproject.com/downloads/cef_binary_6533_linux_x86_64_v6.tar.xz")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: tytan652 <tytan652 at tytanium dot xyz>
2
# Contributor: Alice Gaudon <alice at gaudon dot pro>
3
# Contributor: Benjamin Klettbach <b dot klettbach at gmail dot com>
4
# Contributor: Jonathan Steel <jsteel at archlinux.org>
5
# Contributor: ArcticVanguard <LideEmily at gmail dot com>
6
# Contributor: ledti <antergist at gmail dot com>
7
8
_suffix=browser
9
pkgname="obs-studio-${_suffix}"
10
_pkgver=32.2.0
11
pkgver="${_pkgver//-/_}"
12
pkgrel=2
13
pkgdesc="Free and open source software for video recording and live streaming. With everything except service integration"
14
arch=("x86_64" "aarch64")
15
url="https://github.com/obsproject/obs-studio"
16
license=('GPL-2.0-or-later')
17
# To manage dependency rebuild easily, this will prevent you to rebuild OBS on non-updated system
18
_qtver=6.11
19
_libajantv2ver=18.0.0
20
_libdatachannelver=0.24.3
21
_mbedtlsver=3.6.1
22
_pythonver=3.14
23
depends=(
24
"alsa-lib" # Deps of ALSA plugin and CEF
25
"curl" # Deps of OBS Studio and rtmp-services plugin
26
"ffmpeg-obs>=8" # Deps of OBS Studio and FFmpeg plugin
27
"fontconfig" # Deps of Freetype2 plugin
28
"freetype2" # Deps of Freetype2 plugin
29
"gcc-libs" # Deps of any C++ related binary
30
"glib2" # Deps of libobs, PipeWire plugin and CEF
31
"glibc" # Deps of any C related binary
32
"jack" # Deps of JACK plugin
33
"jansson" # Deps of libobs and rtmp-services plugin
34
"libajantv2>=$_libajantv2ver" # Deps of AJA plugins
35
"libdatachannel>=$_libdatachannelver" # Deps of WebRTC plugin (NICE variant like the Flatpak)
36
"libfdk-aac" # Deps of FDK AAC plugin
37
"libgl" # Deps of libobs-opengl and OBS Studio
38
"libpipewire" # Deps of the PipeWire plugin
39
"libpulse" # Deps of PulseAudio monitoring (in libobs) and PulseAudio plugin
40
"librist" # Deps of FFmpeg plugin
41
"libva" # Deps of FFmpeg plugin and QSV plugin
42
"libvpl" # Deps of QSV plugin
43
"libx11" # Deps of libobs, libobs-opengl, X11 Capture plugin, frontend tools plugin, obs-browser and CEF
44
"libxcb" # Deps of libobs-opengl, X11 Capture plugin and CEF
45
"libxcomposite" # Deps of the X11 capture plugin
46
"libxkbcommon" # Deps of libobs, OBS Studio and CEF
47
"luajit" # Deps of Scripting plugin
48
"mbedtls>=$_mbedtlsver" # Deps of OBS Studio and Outputs plugin
49
"pciutils" # Deps of FFmpeg plugin
50
"python>=$_pythonver" # Deps of Scripting plugin
51
"qrcodegencpp-cmake" # Deps of Websocket plugin
52
"qt6-base>=$_qtver" # Deps of OBS Studio and any frontend plugin
53
"qt6-svg>=$_qtver" # Deps of OBS Studio
54
"rnnoise" # Deps if the filter plugin
55
"simde" # Deps of libobs and its headers
56
"sndio" # Deps of sndio plugin
57
"speexdsp" # Deps if the filter plugin
58
"srt" # Deps of FFmpeg plugin
59
"systemd-libs" # Deps of V4L2 plugin
60
"util-linux-libs" # Deps of libobs
61
"v4l-utils" # Deps of V4L2 plugin
62
"vlc-luajit" # Deps of VLC Plugin ("vlc" issue crashes)
63
"wayland" # Deps of libobs, libobs-opengl and CEF
64
"x264" # Deps of the X264 plugin
65
"zlib" # Deps of libobs
66
67
# Deps of CEF
68
"at-spi2-core" "cairo" "dbus" "expat" "libcups" "libdrm"
69
"libxdamage" "libxext" "libxfixes" "libxrandr" "mesa" "nspr"
70
"nss" "pango"
71
)
72
## About vlc-luajit
73
# The official VLC package will make OBS crash when a VLC source is used.
74
# The issue is that VLC and OBS are compiled with different lua version.
75
# So I also created vlc-luajit, a VLC package compiled with the same lua as OBS.
76
# But to make people unable to install VLC official package with obs-studio-tytan652.
77
# I decided to make vlc-luajit a dependency of OBS rather than an optional one.
78
## About ffmpeg-obs
79
# Read ffmpeg-obs PKGBUILD for more info
80
makedepends=(
81
"asio" # Deps of Websocket plugin (headers-only lib)
82
"cmake"
83
"extra-cmake-modules"
84
"ffnvcodec-headers" # Deps of NVENC plugin (headers-only lib)
85
"git"
86
"uthash" # Deps of libobs (headers-only lib)
87
"nlohmann-json" # Deps of Websocket plugin (headers-only lib)
88
"swig" # Deps of Scripting plugin
89
"websocketpp" # Deps of Websocket plugin (headers-only lib)
90
)
91
optdepends=(
92
"intel-media-sdk: QSV encoder support(<= Rocket Lake & >= Broadwell)"
93
"vpl-gpu-rt: QSV encoder support (>= Alder Lake)"
94
"intel-media-driver: VAAPI encoder support (>= Broadwell)"
95
"libva-intel-driver: VAAPI encoder support (<= Haswell)"
96
"libva-mesa-driver: VAAPI encoder support"
97
"v4l2loopback-dkms: V4L2 virtual camera output"
98
)
99
provides=(
100
"obs-studio=$pkgver" "obs-vst" "obs-websocket" "obs-browser"
101
"obs-studio-plugin-browser"
102
)
103
conflicts=(
104
"obs-studio" "obs-vst" "obs-websocket" "obs-browser"
105
"obs-linuxbrowser" # This plugin is obsolete
106
"libva-vdpau-driver" # This driver is abandonned and make OBS segfault if it happen to be loaded, try libva-nvidia-driver is you really need Nvidia decode through VAAPI
107
"obs-studio-plugin-browser"
108
)
109
options=('debug')
110
source=(
111
"obs-studio::git+https://github.com/obsproject/obs-studio.git#tag=$_pkgver"
112
"obs-browser::git+https://github.com/obsproject/obs-browser.git"
113
"obs-websocket::git+https://github.com/obsproject/obs-websocket.git"
114
)
115
source_x86_64=("https://cdn-fastly.obsproject.com/downloads/cef_binary_6533_linux_x86_64_v6.tar.xz")
116
source_aarch64=("https://cdn-fastly.obsproject.com/downloads/cef_binary_6533_linux_aarch64_v6.tar.xz")
117
sha256sums=(
118
"SKIP"
119
"SKIP"
120
"SKIP"
121
)
122
sha256sums_x86_64=("7963335519a19ccdc5233f7334c5ab023026e2f3e9a0cc417007c09d86608146")
123
sha256sums_aarch64=("642514469eaa29a5c887891084d2e73f7dc2d7405f7dfa7726b2dbc24b309999")
124
125
if [[ ${CARCH/%_v?/} == 'x86_64' ]]; then
126
optdepends+=("decklink: Blackmagic Design DeckLink support")
127
fi
128
129
prepare() {
130
cd "$srcdir/obs-studio"
131
git config submodule.plugins/obs-browser.url $srcdir/obs-browser
132
git config submodule.plugins/obs-websocket.url $srcdir/obs-websocket
133
git -c protocol.file.allow=always submodule update
134
135
## Mark log and titlebar version
136
sed -i "s|obs_get_version_string()|\"$_pkgver-$_suffix-$pkgrel\"|" frontend/OBSApp.cpp
137
138
# Keep sentinel file functional without messing with compile flags
139
sed -i "s|#ifndef NDEBUG|#if 0|" frontend/utility/CrashHandler.cpp
140
}
141
142
build() {
143
cmake -B build -S obs-studio \
144
-DCMAKE_BUILD_TYPE=None \
145
-DCMAKE_INSTALL_PREFIX=/usr \
146
-DCMAKE_INSTALL_LIBDIR=lib \
147
-DENABLE_LIBFDK=ON \
148
-DENABLE_JACK=ON \
149
-DENABLE_SNDIO=ON \
150
-DENABLE_BROWSER=ON \
151
-DCEF_ROOT_DIR="$srcdir/cef_binary_6533_linux_${CARCH/%_v?/}" \
152
-DOBS_VERSION_OVERRIDE="$_pkgver" \
153
-DOBS_COMPILE_DEPRECATION_AS_WARNING=ON \
154
-Wno-dev
155
156
cmake --build build
157
}
158
159
package() {
160
DESTDIR="$pkgdir" cmake --install build
161
}
162
Changes since previous scan
--- PKGBUILD @ 2026-07-27 00:24+++ PKGBUILD @ 2026-08-03 00:08@@ -9,14 +9,14 @@ pkgname="obs-studio-${_suffix}" _pkgver=32.2.0 pkgver="${_pkgver//-/_}"-pkgrel=1+pkgrel=2 pkgdesc="Free and open source software for video recording and live streaming. With everything except service integration" arch=("x86_64" "aarch64") url="https://github.com/obsproject/obs-studio" license=('GPL-2.0-or-later') # To manage dependency rebuild easily, this will prevent you to rebuild OBS on non-updated system _qtver=6.11-_libajantv2ver=17.5.0+_libajantv2ver=18.0.0 _libdatachannelver=0.24.3 _mbedtlsver=3.6.1 _pythonver=3.14Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 07:34:55 | MEDIUM | 1 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 05:19:42 | MEDIUM | 1 |
| 2026-06-20 00:18:46 | CLEAN | 2 |
| 2026-06-19 23:51:18 | MEDIUM | 2 |
| 2026-06-19 19:07:35 | LOW | 2 |
| 2026-06-18 16:11:54 | MEDIUM | 1 |