obs-studio-liberty

LOW
maintainer LibertyGM 21 votes scanned 2026-09-17 00:27:14.276658
View on AUR
Why flagged

The non-standard host (cdn-fastly.obsproject.com) is a legitimate CDN used by the OBS project for official CEF binary releases; the downloaded file is a standard prebuilt component required for building OBS Studio and not an untrusted executable.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The non-standard host (cdn-fastly.obsproject.com) is a legitimate CDN used by the OBS project for official CEF binary releases; the downloaded file is a standard prebuilt component required for building OBS Studio and not an untrusted executable.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:95 "https://cdn-fastly.obsproject.com/downloads/$_cefver.tar.xz"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Konstantin Liberty <jon9097 at gmail dot com>
2
3pkgname=obs-studio-liberty
4pkgver=32.2.2
5pkgrel=1
6pkgdesc="Free, open source software for live streaming and recording. With Browser Source support. Without the need to install ffmpeg-obs, etc."
7arch=('x86_64')
8url="https://github.com/obsproject/obs-studio"
9license=('GPL-2.0-or-later')
10_qtver=6.11.0
11#_libajantv2ver=17.5.0
12_libdatachannelver=0.24.5
13_mbedtlsver=3.6.1
14_pythonver=3.14
15_cefver=cef_binary_6533_linux_x86_64_v6
16depends=(
17 "alsa-lib" # Deps of ALSA plugin and CEF
18 "curl" # Deps of OBS Studio and rtmp-services plugin
19 "ffmpeg>=8" # Deps of OBS Studio and FFmpeg plugin
20 "fontconfig" # Deps of Freetype2 plugin
21 "freetype2" # Deps of Freetype2 plugin
22 "gcc-libs" # Deps of any C++ related binary
23 "glib2" # Deps of libobs, PipeWire plugin and CEF
24 "glibc" # Deps of any C related binary
25 "jack" # Deps of JACK plugin
26 "jansson" # Deps of libobs and rtmp-services plugin
27# "libajantv2>=$_libajantv2ver" # Deps of AJA plugins
28 "libdatachannel>=$_libdatachannelver" # Deps of WebRTC plugin (NICE variant like the Flatpak)
29 "libfdk-aac" # Deps of FDK AAC plugin
30 "libgl" # Deps of libobs-opengl and OBS Studio
31 "libjuice" # UDP Interactive Connectivity Establishment (ICE) library
32 "libpipewire" # Deps of the PipeWire plugin
33 "libpulse" # Deps of PulseAudio monitoring (in libobs) and PulseAudio plugin
34 "librist" # Deps of FFmpeg plugin
35 "libva" # Deps of FFmpeg plugin and QSV plugin
36 "libvpl" # Deps of QSV plugin
37 "libx11" # Deps of libobs, libobs-opengl, X11 Capture plugin, frontend tools plugin, obs-browser and CEF
38 "libxcb" # Deps of libobs-opengl, X11 Capture plugin and CEF
39 "libxcomposite" # Deps of the X11 capture plugin
40 "libxkbcommon" # Deps of libobs, OBS Studio and CEF
41 "luajit" # Deps of Scripting plugin
42 "mbedtls3>=$_mbedtlsver" # Deps of OBS Studio and Outputs plugin
43 "pciutils" # Deps of FFmpeg plugin
44 "python>=$_pythonver" # Deps of Scripting plugin
45 "qrcodegencpp-cmake" # Deps of Websocket plugin
46 "qt6-base>=$_qtver" # Deps of OBS Studio and any frontend plugin
47 "qt6-svg>=$_qtver" # Deps of OBS Studio
48 "qt6-wayland>=$_qtver" # Needed to use Qt on Wayland platform
49 "rnnoise" # Deps if the filter plugin
50 "simde" # Implementations of SIMD instruction sets
51 "sndio" # Deps of sndio plugin
52 "speexdsp" # Deps if the filter plugin
53 "srt" # Deps of FFmpeg plugin
54 "systemd-libs" # Deps of V4L2 plugin
55 "util-linux-libs" # Deps of libobs
56 "v4l-utils" # Deps of V4L2 plugin
57 "vlc" # It is necessary to build the package and work
58 "wayland" # Deps of libobs, libobs-opengl and CEF
59 "x264" # Deps of the X264 plugin
60 "zlib" # Deps of libobs
61
62 # Deps of CEF
63 "at-spi2-core" "cairo" "dbus" "expat" "libcups" "libdrm"
64 "libxdamage" "libxext" "libxfixes" "libxrandr" "mesa" "nspr"
65 "nss" "pango"
66)
67
68makedepends=(
69 "asio" # Deps of Websocket plugin (headers-only lib)
70 "cmake"
71 "extra-cmake-modules"
72 "ffnvcodec-headers" # Deps of NVENC plugin (headers-only lib)
73 "git"
74 "uthash" # Deps of libobs (headers-only lib)
75 "nlohmann-json" # Deps of Websocket plugin (headers-only lib)
76 "swig" # Deps of Scripting plugin
77 "websocketpp" # Deps of Websocket plugin (headers-only lib)
78)
79
80optdepends=(
81 "intel-media-sdk: QSV encoder support(<= Rocket Lake & >= Broadwell)"
82 "vpl-gpu-rt: QSV encoder support (>= Alder Lake)"
83 "intel-media-driver: VAAPI encoder support (>= Broadwell)"
84 "libva-intel-driver: VAAPI encoder support (<= Haswell)"
85 "libva-mesa-driver: VAAPI encoder support"
86 "v4l2loopback-dkms: V4L2 virtual camera output"
87)
88
89provides=("obs-studio=$pkgver" "obs-vst" "obs-websocket" "obs-browser")
90conflicts=("obs-studio" "obs-websocket" "obs-browser" "obs-linuxbrowser" "obs-studio-tytan652" "obs-studio-git" "obs-studio-amf" "obs-studio-browser" "obs-vst" "obs-studio-plugin-browser")
91source=(
92 "obs-studio::git+https://github.com/obsproject/obs-studio.git#tag=$pkgver"
93 "obs-browser::git+https://github.com/obsproject/obs-browser.git"
94 "obs-websocket::git+https://github.com/obsproject/obs-websocket.git"
95 "https://cdn-fastly.obsproject.com/downloads/$_cefver.tar.xz"
96 #"qt_fix.patch"
97)
98
99sha512sums=('33696f3ff534c7ee317dda2e74fb689de94c5e2bbe978ca9950e2fc6e28235e46bb0fe2bbfd9ae64ddfd3f307e01d42945f46740b0ab75ef8a9478cabc61d152'
100 'SKIP'
101 'SKIP'
102 '790da9bf3a2495eb6d4d155ae89adea88a45f496b5996278d72df47a1dea662241b2b73d93be7fc56f83186805c591dcd718266575a74d1b25b6b93379ce74b3')
103
104prepare() {
105 cd "$srcdir/obs-studio"
106 git config submodule.plugins/obs-browser.url $srcdir/obs-browser
107 git config submodule.plugins/obs-websocket.url $srcdir/obs-websocket
108
109 #git checkout 5e7804c1376a7cc40c0270a8b6edd5a6ece8272f
110
111 git -c protocol.file.allow=always submodule update
112
113 #patch -Np1 -i $srcdir/qt_fix.patch
114
115}
116
117# build() {
118#
119# cmake -B build -S obs-studio \
120# -DCMAKE_BUILD_TYPE=Release \
121# -DCMAKE_INSTALL_PREFIX=/usr \
122# -DCMAKE_INSTALL_LIBDIR=lib \
123# -DENABLE_LIBFDK=ON \
124# -DENABLE_JACK=ON \
125# -DENABLE_SNDIO=ON \
126# -DENABLE_AJA=OFF \
127# -DENABLE_BROWSER=ON \
128# -DENABLE_NVENC=ON \
129# -DCEF_ROOT_DIR="$srcdir/${_cefver/%_v?/}" \
130# -DOBS_VERSION_OVERRIDE="$pkgver" \
131# -DOBS_COMPILE_DEPRECATION_AS_WARNING=ON \
132# -Wno-dev
133#
134# cmake --build build
135# }
136
137build() {
138
139local cmake_options=(
140 -B build
141 -S obs-studio
142 -DCMAKE_BUILD_TYPE=Release
143 -DCMAKE_INSTALL_PREFIX=/usr
144 -DCMAKE_INSTALL_LIBDIR=lib
145 -DENABLE_LIBFDK=ON
146 -DENABLE_JACK=ON
147 -DENABLE_SNDIO=ON
148 -DENABLE_AJA=OFF
149 -DENABLE_BROWSER=ON
150 -DENABLE_NVENC=ON
151 -DCEF_ROOT_DIR="$srcdir/${_cefver/%_v?/}"
152 -DOBS_VERSION_OVERRIDE="$pkgver"
153 -DOBS_COMPILE_DEPRECATION_AS_WARNING=ON
154
155 # Support mbedtls 3
156 -DMbedTLS_DIR="/usr/lib/mbedtls3/cmake/MbedTLS"
157 -DMbedTLS_INCLUDE_DIR="/usr/include/mbedtls3"
158 -DMbedtls_LIBRARY="/usr/lib/mbedtls3/libmbedtls.so"
159 -DMbedcrypto_LIBRARY="/usr/lib/mbedtls3/libmbedcrypto.so"
160 -DMbedx509_LIBRARY="/usr/lib/mbedtls3/libmbedx509.so"
161
162 -Wno-dev
163)
164 cmake "${cmake_options[@]}"
165 cmake --build build
166}
167
168
169package() {
170 DESTDIR="$pkgdir" cmake --install build
171}
172

Scan history

Scanned at (UTC)SeverityRules
2026-09-17 00:27:14 Low 2
2026-09-16 00:03:17 Low 2
2026-09-15 00:25:31 Low 2
2026-09-14 00:27:57 Low 2
2026-09-13 00:19:54 Low 2
2026-09-12 00:25:17 Low 2
2026-09-11 00:19:22 Low 2
2026-09-10 00:22:44 Low 2
2026-09-09 00:04:09 Low 2
2026-09-08 00:18:08 Low 2
2026-09-07 00:30:15 Low 2
2026-09-06 00:17:06 Low 2
2026-09-05 00:16:27 Low 2
2026-09-04 00:03:13 Low 2
2026-09-03 00:15:47 Low 2
2026-09-02 00:02:31 Low 2
2026-09-01 00:11:19 Low 2
2026-08-31 00:19:57 Low 2
2026-08-30 00:04:14 Low 2
2026-08-29 00:29:17 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion