obs-studio-liberty
The non-standard host (cdn-fastly.obsproject.com) is a legitimate CDN used by the OBS project for official CEF binary releases; the downloaded file is a standard prebuilt component required for building OBS Studio and not an untrusted executable.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The non-standard host (cdn-fastly.obsproject.com) is a legitimate CDN used by the OBS project for official CEF binary releases; the downloaded file is a standard prebuilt component required for building OBS Studio and not an untrusted executable.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:95
"https://cdn-fastly.obsproject.com/downloads/$_cefver.tar.xz"
PKGBUILD
1 offending line(s) highlighted# Maintainer: Konstantin Liberty <jon9097 at gmail dot com>
pkgname=obs-studio-liberty
pkgver=32.2.2
pkgrel=1
pkgdesc="Free, open source software for live streaming and recording. With Browser Source support. Without the need to install ffmpeg-obs, etc."
arch=('x86_64')
url="https://github.com/obsproject/obs-studio"
license=('GPL-2.0-or-later')
_qtver=6.11.0
#_libajantv2ver=17.5.0
_libdatachannelver=0.24.5
_mbedtlsver=3.6.1
_pythonver=3.14
_cefver=cef_binary_6533_linux_x86_64_v6
depends=(
"alsa-lib" # Deps of ALSA plugin and CEF
"curl" # Deps of OBS Studio and rtmp-services plugin
"ffmpeg>=8" # Deps of OBS Studio and FFmpeg plugin
"fontconfig" # Deps of Freetype2 plugin
"freetype2" # Deps of Freetype2 plugin
"gcc-libs" # Deps of any C++ related binary
"glib2" # Deps of libobs, PipeWire plugin and CEF
"glibc" # Deps of any C related binary
"jack" # Deps of JACK plugin
"jansson" # Deps of libobs and rtmp-services plugin
# "libajantv2>=$_libajantv2ver" # Deps of AJA plugins
"libdatachannel>=$_libdatachannelver" # Deps of WebRTC plugin (NICE variant like the Flatpak)
"libfdk-aac" # Deps of FDK AAC plugin
"libgl" # Deps of libobs-opengl and OBS Studio
"libjuice" # UDP Interactive Connectivity Establishment (ICE) library
"libpipewire" # Deps of the PipeWire plugin
"libpulse" # Deps of PulseAudio monitoring (in libobs) and PulseAudio plugin
"librist" # Deps of FFmpeg plugin
"libva" # Deps of FFmpeg plugin and QSV plugin
"libvpl" # Deps of QSV plugin
"libx11" # Deps of libobs, libobs-opengl, X11 Capture plugin, frontend tools plugin, obs-browser and CEF
"libxcb" # Deps of libobs-opengl, X11 Capture plugin and CEF
"libxcomposite" # Deps of the X11 capture plugin
"libxkbcommon" # Deps of libobs, OBS Studio and CEF
"luajit" # Deps of Scripting plugin
"mbedtls3>=$_mbedtlsver" # Deps of OBS Studio and Outputs plugin
"pciutils" # Deps of FFmpeg plugin
"python>=$_pythonver" # Deps of Scripting plugin
"qrcodegencpp-cmake" # Deps of Websocket plugin
"qt6-base>=$_qtver" # Deps of OBS Studio and any frontend plugin
"qt6-svg>=$_qtver" # Deps of OBS Studio
"qt6-wayland>=$_qtver" # Needed to use Qt on Wayland platform
"rnnoise" # Deps if the filter plugin
"simde" # Implementations of SIMD instruction sets
"sndio" # Deps of sndio plugin
"speexdsp" # Deps if the filter plugin
"srt" # Deps of FFmpeg plugin
"systemd-libs" # Deps of V4L2 plugin
"util-linux-libs" # Deps of libobs
"v4l-utils" # Deps of V4L2 plugin
"vlc" # It is necessary to build the package and work
"wayland" # Deps of libobs, libobs-opengl and CEF
"x264" # Deps of the X264 plugin
"zlib" # Deps of libobs
# Deps of CEF
"at-spi2-core" "cairo" "dbus" "expat" "libcups" "libdrm"
"libxdamage" "libxext" "libxfixes" "libxrandr" "mesa" "nspr"
"nss" "pango"
)
makedepends=(
"asio" # Deps of Websocket plugin (headers-only lib)
"cmake"
"extra-cmake-modules"
"ffnvcodec-headers" # Deps of NVENC plugin (headers-only lib)
"git"
"uthash" # Deps of libobs (headers-only lib)
"nlohmann-json" # Deps of Websocket plugin (headers-only lib)
"swig" # Deps of Scripting plugin
"websocketpp" # Deps of Websocket plugin (headers-only lib)
)
optdepends=(
"intel-media-sdk: QSV encoder support(<= Rocket Lake & >= Broadwell)"
"vpl-gpu-rt: QSV encoder support (>= Alder Lake)"
"intel-media-driver: VAAPI encoder support (>= Broadwell)"
"libva-intel-driver: VAAPI encoder support (<= Haswell)"
"libva-mesa-driver: VAAPI encoder support"
"v4l2loopback-dkms: V4L2 virtual camera output"
)
provides=("obs-studio=$pkgver" "obs-vst" "obs-websocket" "obs-browser")
conflicts=("obs-studio" "obs-websocket" "obs-browser" "obs-linuxbrowser" "obs-studio-tytan652" "obs-studio-git" "obs-studio-amf" "obs-studio-browser" "obs-vst" "obs-studio-plugin-browser")
source=(
"obs-studio::git+https://github.com/obsproject/obs-studio.git#tag=$pkgver"
"obs-browser::git+https://github.com/obsproject/obs-browser.git"
"obs-websocket::git+https://github.com/obsproject/obs-websocket.git"
"https://cdn-fastly.obsproject.com/downloads/$_cefver.tar.xz"
#"qt_fix.patch"
)
sha512sums=('33696f3ff534c7ee317dda2e74fb689de94c5e2bbe978ca9950e2fc6e28235e46bb0fe2bbfd9ae64ddfd3f307e01d42945f46740b0ab75ef8a9478cabc61d152'
'SKIP'
'SKIP'
'790da9bf3a2495eb6d4d155ae89adea88a45f496b5996278d72df47a1dea662241b2b73d93be7fc56f83186805c591dcd718266575a74d1b25b6b93379ce74b3')
prepare() {
cd "$srcdir/obs-studio"
git config submodule.plugins/obs-browser.url $srcdir/obs-browser
git config submodule.plugins/obs-websocket.url $srcdir/obs-websocket
#git checkout 5e7804c1376a7cc40c0270a8b6edd5a6ece8272f
git -c protocol.file.allow=always submodule update
#patch -Np1 -i $srcdir/qt_fix.patch
}
# build() {
#
# cmake -B build -S obs-studio \
# -DCMAKE_BUILD_TYPE=Release \
# -DCMAKE_INSTALL_PREFIX=/usr \
# -DCMAKE_INSTALL_LIBDIR=lib \
# -DENABLE_LIBFDK=ON \
# -DENABLE_JACK=ON \
# -DENABLE_SNDIO=ON \
# -DENABLE_AJA=OFF \
# -DENABLE_BROWSER=ON \
# -DENABLE_NVENC=ON \
# -DCEF_ROOT_DIR="$srcdir/${_cefver/%_v?/}" \
# -DOBS_VERSION_OVERRIDE="$pkgver" \
# -DOBS_COMPILE_DEPRECATION_AS_WARNING=ON \
# -Wno-dev
#
# cmake --build build
# }
build() {
local cmake_options=(
-B build
-S obs-studio
-DCMAKE_BUILD_TYPE=Release
-DCMAKE_INSTALL_PREFIX=/usr
-DCMAKE_INSTALL_LIBDIR=lib
-DENABLE_LIBFDK=ON
-DENABLE_JACK=ON
-DENABLE_SNDIO=ON
-DENABLE_AJA=OFF
-DENABLE_BROWSER=ON
-DENABLE_NVENC=ON
-DCEF_ROOT_DIR="$srcdir/${_cefver/%_v?/}"
-DOBS_VERSION_OVERRIDE="$pkgver"
-DOBS_COMPILE_DEPRECATION_AS_WARNING=ON
# Support mbedtls 3
-DMbedTLS_DIR="/usr/lib/mbedtls3/cmake/MbedTLS"
-DMbedTLS_INCLUDE_DIR="/usr/include/mbedtls3"
-DMbedtls_LIBRARY="/usr/lib/mbedtls3/libmbedtls.so"
-DMbedcrypto_LIBRARY="/usr/lib/mbedtls3/libmbedcrypto.so"
-DMbedx509_LIBRARY="/usr/lib/mbedtls3/libmbedx509.so"
-Wno-dev
)
cmake "${cmake_options[@]}"
cmake --build build
}
package() {
DESTDIR="$pkgdir" cmake --install build
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |