obs-studio-liberty

LOW
maintainer LibertyGM 21 votes scanned 2026-11-01 00:21:48.120785
View on AUR
Why flagged

The non-standard host (cdn-fastly.obsproject.com) is an official CDN for OBS Project releases, making the CEF binary download legitimate and low risk despite the static analyzer flag.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The non-standard host (cdn-fastly.obsproject.com) is an official CDN for OBS Project releases, making the CEF binary download legitimate and low risk despite the static analyzer flag.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:96 "https://cdn-fastly.obsproject.com/downloads/$_cefver.tar.xz"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Konstantin Liberty <jon9097 at gmail dot com>
2
3pkgname=obs-studio-liberty
4pkgver=33.0.1
5pkgrel=1
6pkgdesc="Free, open source software for live streaming and recording. With Browser Source support. Without the need to install ffmpeg-obs, etc."
7arch=('x86_64')
8url="https://github.com/obsproject/obs-studio"
9license=('GPL-2.0-or-later')
10_qtver=6.11.0
11#_libajantv2ver=17.5.0
12_libdatachannelver=0.24.5
13_mbedtlsver=3.6.1
14_pythonver=3.14
15_cefver=cef_binary_7871_linux_x86_64
16depends=(
17 "alsa-lib" # Deps of ALSA plugin and CEF
18 "curl" # Deps of OBS Studio and rtmp-services plugin
19 "ffmpeg>=8" # Deps of OBS Studio and FFmpeg plugin
20 "fontconfig" # Deps of Freetype2 plugin
21 "freetype2" # Deps of Freetype2 plugin
22 "glib2" # Deps of libobs, PipeWire plugin and CEF
23 "glibc" # Deps of any C related binary
24 "jack" # Deps of JACK plugin
25 "jansson" # Deps of libobs and rtmp-services plugin
26# "libajantv2>=$_libajantv2ver" # Deps of AJA plugins
27 "libdatachannel>=$_libdatachannelver" # Deps of WebRTC plugin (NICE variant like the Flatpak)
28 "libfdk-aac" # Deps of FDK AAC plugin
29 "libgcc" # GCC runtime library
30 "libgl" # Deps of libobs-opengl and OBS Studio
31 "libjuice" # UDP Interactive Connectivity Establishment (ICE) library
32 "libpipewire" # Deps of the PipeWire plugin
33 "libpulse" # Deps of PulseAudio monitoring (in libobs) and PulseAudio plugin
34 "librist" # Deps of FFmpeg plugin
35 "libstdc++" # GNU C++ standard library
36 "libva" # Deps of FFmpeg plugin and QSV plugin
37 "libvpl" # Deps of QSV plugin
38 "libx11" # Deps of libobs, libobs-opengl, X11 Capture plugin, frontend tools plugin, obs-browser and CEF
39 "libxcb" # Deps of libobs-opengl, X11 Capture plugin and CEF
40 "libxcomposite" # Deps of the X11 capture plugin
41 "libxkbcommon" # Deps of libobs, OBS Studio and CEF
42 "luajit" # Deps of Scripting plugin
43 "mbedtls3>=$_mbedtlsver" # Deps of OBS Studio and Outputs plugin
44 "pciutils" # Deps of FFmpeg plugin
45 "python>=$_pythonver" # Deps of Scripting plugin
46 "qrcodegencpp-cmake" # Deps of Websocket plugin
47 "qt6-base>=$_qtver" # Deps of OBS Studio and any frontend plugin
48 "qt6-svg>=$_qtver" # Deps of OBS Studio
49 "qt6-wayland>=$_qtver" # Needed to use Qt on Wayland platform
50 "rnnoise" # Deps if the filter plugin
51 "simde" # Implementations of SIMD instruction sets
52 "sndio" # Deps of sndio plugin
53 "speexdsp" # Deps if the filter plugin
54 "srt" # Deps of FFmpeg plugin
55 "systemd-libs" # Deps of V4L2 plugin
56 "util-linux-libs" # Deps of libobs
57 "v4l-utils" # Deps of V4L2 plugin
58 "vlc" # It is necessary to build the package and work
59 "wayland" # Deps of libobs, libobs-opengl and CEF
60 "x264" # Deps of the X264 plugin
61 "zlib" # Deps of libobs
62
63 # Deps of CEF
64 "at-spi2-core" "cairo" "dbus" "expat" "libcups" "libdrm"
65 "libxdamage" "libxext" "libxfixes" "libxrandr" "mesa" "nspr"
66 "nss" "pango"
67)
68
69makedepends=(
70 "asio" # Deps of Websocket plugin (headers-only lib)
71 "cmake"
72 "extra-cmake-modules"
73 "ffnvcodec-headers" # Deps of NVENC plugin (headers-only lib)
74 "git"
75 "uthash" # Deps of libobs (headers-only lib)
76 "nlohmann-json" # Deps of Websocket plugin (headers-only lib)
77 "swig" # Deps of Scripting plugin
78 "websocketpp" # Deps of Websocket plugin (headers-only lib)
79)
80
81optdepends=(
82 "intel-media-sdk: QSV encoder support(<= Rocket Lake & >= Broadwell)"
83 "vpl-gpu-rt: QSV encoder support (>= Alder Lake)"
84 "intel-media-driver: VAAPI encoder support (>= Broadwell)"
85 "libva-intel-driver: VAAPI encoder support (<= Haswell)"
86 "libva-mesa-driver: VAAPI encoder support"
87 "v4l2loopback-dkms: V4L2 virtual camera output"
88)
89
90provides=("obs-studio=$pkgver" "obs-vst" "obs-websocket" "obs-browser")
91conflicts=("obs-studio" "obs-websocket" "obs-browser" "obs-linuxbrowser" "obs-studio-tytan652" "obs-studio-git" "obs-studio-amf" "obs-studio-browser" "obs-vst" "obs-studio-plugin-browser")
92source=(
93 "obs-studio::git+https://github.com/obsproject/obs-studio.git#tag=$pkgver"
94 "obs-browser::git+https://github.com/obsproject/obs-browser.git"
95 "obs-websocket::git+https://github.com/obsproject/obs-websocket.git"
96 "https://cdn-fastly.obsproject.com/downloads/$_cefver.tar.xz"
97 #"qt_fix.patch"
98)
99
100sha512sums=('845b955a65ff9357ca870756748abe5c790122f7e89dc726986c036e638e734bd0add63850a948eb01c04fe323ade66a74fd4e69e5206943439fe62919fc81a6'
101 'SKIP'
102 'SKIP'
103 'd5ffabfe40d0c3cfad3a6e7522c9352d05bdc6330615e3f42eddfe787e82e8c21a0d7b323aaae3a1fb52e2a377d218624fc60dc1ae88762c8eb16d589f368289')
104
105prepare() {
106 cd "$srcdir/obs-studio"
107 git config submodule.plugins/obs-browser.url $srcdir/obs-browser
108 git config submodule.plugins/obs-websocket.url $srcdir/obs-websocket
109
110 #git checkout 5e7804c1376a7cc40c0270a8b6edd5a6ece8272f
111
112 git -c protocol.file.allow=always submodule update
113
114 #patch -Np1 -i $srcdir/qt_fix.patch
115
116}
117
118# build() {
119#
120# cmake -B build -S obs-studio \
121# -DCMAKE_BUILD_TYPE=Release \
122# -DCMAKE_INSTALL_PREFIX=/usr \
123# -DCMAKE_INSTALL_LIBDIR=lib \
124# -DENABLE_LIBFDK=ON \
125# -DENABLE_JACK=ON \
126# -DENABLE_SNDIO=ON \
127# -DENABLE_AJA=OFF \
128# -DENABLE_BROWSER=ON \
129# -DENABLE_NVENC=ON \
130# -DCEF_ROOT_DIR="$srcdir/${_cefver/%_v?/}" \
131# -DOBS_VERSION_OVERRIDE="$pkgver" \
132# -DOBS_COMPILE_DEPRECATION_AS_WARNING=ON \
133# -Wno-dev
134#
135# cmake --build build
136# }
137
138build() {
139
140local cmake_options=(
141 -B build
142 -S obs-studio
143 -DCMAKE_BUILD_TYPE=Release
144 -DCMAKE_INSTALL_PREFIX=/usr
145 -DCMAKE_INSTALL_LIBDIR=lib
146 -DENABLE_LIBFDK=ON
147 -DENABLE_JACK=ON
148 -DENABLE_SNDIO=ON
149 -DENABLE_AJA=OFF
150 -DENABLE_BROWSER=ON
151 -DENABLE_NVENC=ON
152 -DCEF_ROOT_DIR="$srcdir/${_cefver/%_v?/}"
153 -DOBS_VERSION_OVERRIDE="$pkgver"
154 -DOBS_COMPILE_DEPRECATION_AS_WARNING=ON
155
156 # Support mbedtls 3
157 -DMbedTLS_DIR="/usr/lib/mbedtls3/cmake/MbedTLS"
158 -DMbedTLS_INCLUDE_DIR="/usr/include/mbedtls3"
159 -DMbedtls_LIBRARY="/usr/lib/mbedtls3/libmbedtls.so"
160 -DMbedcrypto_LIBRARY="/usr/lib/mbedtls3/libmbedcrypto.so"
161 -DMbedx509_LIBRARY="/usr/lib/mbedtls3/libmbedx509.so"
162
163 -Wno-dev
164)
165 cmake "${cmake_options[@]}"
166 cmake --build build
167}
168
169
170package() {
171 DESTDIR="$pkgdir" cmake --install build
172}
173

Changes since previous scan

--- PKGBUILD @ 2026-10-29 00:13
+++ PKGBUILD @ 2026-11-01 00:21
@@ -1,7 +1,7 @@
# Maintainer: Konstantin Liberty <jon9097 at gmail dot com>
pkgname=obs-studio-liberty
-pkgver=33.0.0
+pkgver=33.0.1
pkgrel=1
pkgdesc="Free, open source software for live streaming and recording. With Browser Source support. Without the need to install ffmpeg-obs, etc."
arch=('x86_64')
@@ -97,7 +97,7 @@
#"qt_fix.patch"
)
-sha512sums=('c65f3f9c2b232470fe680d2c94dc2477685bb754758a6fd9bab0ce25bf7df75d830417bd6e743f7063dfa4d6f202ca1a3e7645c0b2405c8a30423275bc4d97e9'
+sha512sums=('845b955a65ff9357ca870756748abe5c790122f7e89dc726986c036e638e734bd0add63850a948eb01c04fe323ade66a74fd4e69e5206943439fe62919fc81a6'
'SKIP'
'SKIP'
'd5ffabfe40d0c3cfad3a6e7522c9352d05bdc6330615e3f42eddfe787e82e8c21a0d7b323aaae3a1fb52e2a377d218624fc60dc1ae88762c8eb16d589f368289')

Scan history

Scanned at (UTC)SeverityRules
2026-11-01 00:21:48 Low 2
2026-10-31 00:07:41 Low 2
2026-10-30 00:29:30 Low 2
2026-10-29 23:54:04 Medium 1
2026-10-29 00:13:55 Low 2
2026-10-28 00:06:54 Low 2
2026-10-27 00:23:28 Low 2
2026-10-26 00:12:40 Low 2
2026-10-25 00:20:48 Low 2
2026-10-24 09:40:04 Medium 1
2026-10-24 00:14:55 Low 2
2026-10-23 00:02:19 Low 2
2026-10-22 00:13:10 Low 2
2026-10-21 00:12:50 Low 2
2026-10-20 00:10:31 Low 2
2026-10-19 00:03:55 Low 2
2026-10-18 00:06:55 Low 2
2026-10-17 00:21:55 Low 2
2026-10-16 00:12:47 Low 2
2026-10-15 00:28:05 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion