obs-studio-rc
LOW
maintainer tytan652
2 votes
scanned 2026-11-01 00:21:48.120785
Why flagged
The source URLs are from cdn-fastly.obsproject.com, a legitimate CDN used by the OBS project; the files are CEF binaries necessary for building, and checksums are provided, making the risk low despite the non-standard host flag.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source URLs are from cdn-fastly.obsproject.com, a legitimate CDN used by the OBS project; the files are CEF binaries necessary for building, and checksums are provided, making the risk low despite the non-standard host flag.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:112
source_x86_64=("https://cdn-fastly.obsproject.com/downloads/cef_binary_7871_linux_x86_64.tar.xz")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: tytan652 <tytan652 at tytanium dot xyz>
2
3
_suffix=rc
4
pkgname="obs-studio-${_suffix}"
5
_pkgver=33.0.1
6
pkgver="${_pkgver//-/_}"
7
pkgrel=1
8
epoch=15
9
pkgdesc="Beta cycle of the free and open source software for video recording and live streaming. With everything except service integration"
10
arch=("x86_64" "aarch64")
11
url="https://github.com/obsproject/obs-studio"
12
license=('GPL-2.0-or-later')
13
# To manage dependency rebuild easily, this will prevent you to rebuild OBS on non-updated system
14
_qtver=6.11
15
_libajantv2ver=18.0.0
16
_libdatachannelver=0.24.3
17
_mbedtlsver=3.6.1
18
_pythonver=3.14
19
depends=(
20
"alsa-lib" # Deps of ALSA plugin and CEF
21
"curl" # Deps of OBS Studio and rtmp-services plugin
22
"ffmpeg-obs>=9" # Deps of OBS Studio and FFmpeg plugin
23
"fontconfig" # Deps of Freetype2 plugin
24
"freetype2" # Deps of Freetype2 plugin
25
"glib2" # Deps of libobs, PipeWire plugin and CEF
26
"glibc" # Deps of any C related binary
27
"jack" # Deps of JACK plugin
28
"jansson" # Deps of libobs and rtmp-services plugin
29
"libajantv2>=$_libajantv2ver" # Deps of AJA plugins
30
"libdatachannel>=$_libdatachannelver" # Deps of WebRTC plugin (NICE variant like the Flatpak)
31
"libfdk-aac" # Deps of FDK AAC plugin
32
"libgcc" # Deps of any C++ related binary
33
"libgl" # Deps of libobs-opengl and OBS Studio
34
"libpipewire" # Deps of the PipeWire plugin
35
"libpulse" # Deps of PulseAudio monitoring (in libobs) and PulseAudio plugin
36
"librist" # Deps of FFmpeg plugin
37
"libstdc++" # Deps of any C++ related binary
38
"libva" # Deps of FFmpeg plugin and QSV plugin
39
"libvpl" # Deps of QSV plugin
40
"libx11" # Deps of libobs, libobs-opengl, X11 Capture plugin, frontend tools plugin, obs-browser and CEF
41
"libxcb" # Deps of libobs-opengl, X11 Capture plugin and CEF
42
"libxcomposite" # Deps of the X11 capture plugin
43
"libxkbcommon" # Deps of libobs, OBS Studio and CEF
44
"luajit" # Deps of Scripting plugin
45
"mbedtls3>=$_mbedtlsver" # Deps of OBS Studio and Outputs plugin
46
"pciutils" # Deps of FFmpeg plugin
47
"python>=$_pythonver" # Deps of Scripting plugin
48
"qrcodegencpp-cmake" # Deps of Websocket plugin
49
"qt6-base>=$_qtver" # Deps of OBS Studio and any frontend plugin
50
"qt6-svg>=$_qtver" # Deps of OBS Studio
51
"rnnoise" # Deps if the filter plugin
52
"simde" # Deps of libobs and its headers
53
"sndio" # Deps of sndio plugin
54
"speexdsp" # Deps if the filter plugin
55
"srt" # Deps of FFmpeg plugin
56
"systemd-libs" # Deps of V4L2 plugin
57
"util-linux-libs" # Deps of libobs
58
"v4l-utils" # Deps of V4L2 plugin
59
"vlc-luajit" # Deps of VLC Plugin ("vlc" issue crashes)
60
"wayland" # Deps of libobs, libobs-opengl and CEF
61
"x264" # Deps of the X264 plugin
62
"zlib" # Deps of libobs
63
64
# Deps of CEF
65
"at-spi2-core" "cairo" "dbus" "expat" "libcups" "libdrm"
66
"libxdamage" "libxext" "libxfixes" "libxrandr" "mesa" "nspr"
67
"nss" "pango"
68
)
69
## About vlc-luajit
70
# The official VLC package will make OBS crash when a VLC source is used.
71
# The issue is that VLC and OBS are compiled with different lua version.
72
# So I also created vlc-luajit, a VLC package compiled with the same lua as OBS.
73
# But to make people unable to install VLC official package with obs-studio-tytan652.
74
# I decided to make vlc-luajit a dependency of OBS rather than an optional one.
75
## About ffmpeg-obs
76
# Read ffmpeg-obs PKGBUILD for more info
77
makedepends=(
78
"asio" # Deps of Websocket plugin (headers-only lib)
79
"cmake"
80
"extra-cmake-modules"
81
"ffnvcodec-headers" # Deps of NVENC plugin (headers-only lib)
82
"git"
83
"uthash" # Deps of libobs (headers-only lib)
84
"nlohmann-json" # Deps of Websocket plugin (headers-only lib)
85
"swig" # Deps of Scripting plugin
86
"websocketpp" # Deps of Websocket plugin (headers-only lib)
87
)
88
optdepends=(
89
"intel-media-sdk: QSV encoder support(<= Rocket Lake & >= Broadwell)"
90
"vpl-gpu-rt: QSV encoder support (>= Alder Lake)"
91
"intel-media-driver: VAAPI encoder support (>= Broadwell)"
92
"libva-intel-driver: VAAPI encoder support (<= Haswell)"
93
"libva-mesa-driver: VAAPI encoder support"
94
"v4l2loopback-dkms: V4L2 virtual camera output"
95
)
96
provides=(
97
"obs-studio=$pkgver" "obs-vst" "obs-websocket" "obs-browser"
98
"obs-studio-plugin-browser"
99
)
100
conflicts=(
101
"obs-studio" "obs-vst" "obs-websocket" "obs-browser"
102
"obs-linuxbrowser" # This plugin is obsolete
103
"libva-vdpau-driver" # This driver is abandonned and make OBS segfault if it happen to be loaded, try libva-nvidia-driver is you really need Nvidia decode through VAAPI
104
"obs-studio-plugin-browser"
105
)
106
options=('debug')
107
source=(
108
"obs-studio::git+https://github.com/obsproject/obs-studio.git#tag=$_pkgver"
109
"obs-browser::git+https://github.com/obsproject/obs-browser.git"
110
"obs-websocket::git+https://github.com/obsproject/obs-websocket.git"
111
)
112
source_x86_64=("https://cdn-fastly.obsproject.com/downloads/cef_binary_7871_linux_x86_64.tar.xz")
113
source_aarch64=("https://cdn-fastly.obsproject.com/downloads/cef_binary_7871_linux_aarch64.tar.xz")
114
sha256sums=(
115
"SKIP"
116
"SKIP"
117
"SKIP"
118
)
119
sha256sums_x86_64=("8ffc64d06ea74da613eeda7f2aa5d4e98661af6fa3ed8c68724c9a6e4e89ea8e")
120
sha256sums_aarch64=("b05cf13b0f482e3b0149ac21268268c536d091b5e6608c742019ebd6c8e8a1e3")
121
122
if [[ ${CARCH/%_v?/} == 'x86_64' ]]; then
123
optdepends+=("decklink: Blackmagic Design DeckLink support")
124
fi
125
126
prepare() {
127
cd "$srcdir/obs-studio"
128
git config submodule.plugins/obs-browser.url $srcdir/obs-browser
129
git config submodule.plugins/obs-websocket.url $srcdir/obs-websocket
130
git -c protocol.file.allow=always submodule update
131
132
## Mark log and titlebar version
133
sed -i "s|obs_get_version_string()|\"$_pkgver-$_suffix-$pkgrel\"|" frontend/OBSApp.cpp
134
135
# Keep sentinel file functional without messing with compile flags
136
sed -i "s|#ifndef NDEBUG|#if 0|" frontend/utility/CrashHandler.cpp
137
}
138
139
build() {
140
cmake -B build -S obs-studio \
141
-DCMAKE_BUILD_TYPE=None \
142
-DCMAKE_INSTALL_PREFIX=/usr \
143
-DCMAKE_INSTALL_LIBDIR=lib \
144
-DENABLE_LIBFDK=ON \
145
-DENABLE_JACK=ON \
146
-DENABLE_SNDIO=ON \
147
-DENABLE_BROWSER=ON \
148
-DCEF_ROOT_DIR="$srcdir/cef_binary_7871_linux_${CARCH/%_v?/}" \
149
-DOBS_VERSION_OVERRIDE="$_pkgver" \
150
-DOBS_COMPILE_DEPRECATION_AS_WARNING=ON \
151
-DCMAKE_INCLUDE_PATH="/usr/include/mbedtls3;/usr/include" \
152
-DMbedTLS_ROOT="/usr/lib/mbedtls3/cmake/MbedTLS" \
153
-Wno-dev
154
155
cmake --build build
156
}
157
158
package() {
159
DESTDIR="$pkgdir" cmake --install build
160
}
161
Changes since previous scan
--- PKGBUILD @ 2026-10-30 00:29+++ PKGBUILD @ 2026-11-01 00:21@@ -2,7 +2,7 @@ _suffix=rc pkgname="obs-studio-${_suffix}"-_pkgver=33.0.0+_pkgver=33.0.1 pkgver="${_pkgver//-/_}" pkgrel=1 epoch=15Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 09:55:25 | Medium | 1 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 05:39:24 | Medium | 1 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 05:30:25 | Medium | 1 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 05:21:06 | Medium | 1 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |