obs-studio-tytan652

maintainer tytan652 · 62 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package downloads CEF binaries from the official obsproject.com CDN, which is a trusted source; despite the static analyzer flagging the host as non-standard, the download is verifiable via checksum and is part of the normal build process for OBS Studio.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads CEF binaries from the official obsproject.com CDN, which is a trusted source; despite the static analyzer flagging the host as non-standard, the download is verifiable via checksum and is part of the normal build process for OBS Studio.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:112 source_x86_64=("https://cdn-fastly.obsproject.com/downloads/cef_binary_6533_linux_x86_64_v6.tar.xz")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: tytan652 <tytan652 at tytanium dot xyz>
2
3_suffix=tytan652
4pkgname="obs-studio-${_suffix}"
5_pkgver=32.2.0
6pkgver="${_pkgver//-/_}"
7pkgrel=2
8pkgdesc="Free and open source software for video recording and live streaming. With everything except service integrations. Plus my bind interface PR, and sometimes backported fixes"
9arch=("x86_64" "aarch64")
10url="https://github.com/obsproject/obs-studio"
11license=('GPL-2.0-or-later')
12# To manage dependency rebuild easily, this will prevent you to rebuild OBS on non-updated system
13_qtver=6.11
14_libajantv2ver=18.0.0
15_libdatachannelver=0.24.3
16_mbedtlsver=3.6.1
17_pythonver=3.14
18depends=(
19 "alsa-lib" # Deps of ALSA plugin and CEF
20 "curl" # Deps of OBS Studio and rtmp-services plugin
21 "ffmpeg-obs>=8" # Deps of OBS Studio and FFmpeg plugin
22 "fontconfig" # Deps of Freetype2 plugin
23 "freetype2" # Deps of Freetype2 plugin
24 "gcc-libs" # Deps of any C++ related binary
25 "glib2" # Deps of libobs, PipeWire plugin and CEF
26 "glibc" # Deps of any C related binary
27 "jack" # Deps of JACK plugin
28 "jansson" # Deps of libobs and rtmp-services plugin
29 "libajantv2>=$_libajantv2ver" # Deps of AJA plugins
30 "libdatachannel>=$_libdatachannelver" # Deps of WebRTC plugin (NICE variant like the Flatpak)
31 "libfdk-aac" # Deps of FDK AAC plugin
32 "libgl" # Deps of libobs-opengl and OBS Studio
33 "libpipewire" # Deps of the PipeWire plugin
34 "libpulse" # Deps of PulseAudio monitoring (in libobs) and PulseAudio plugin
35 "librist" # Deps of FFmpeg plugin
36 "libva" # Deps of FFmpeg plugin and QSV plugin
37 "libvpl" # Deps of QSV plugin
38 "libx11" # Deps of libobs, libobs-opengl, X11 Capture plugin, frontend tools plugin, obs-browser and CEF
39 "libxcb" # Deps of libobs-opengl, X11 Capture plugin and CEF
40 "libxcomposite" # Deps of the X11 capture plugin
41 "libxkbcommon" # Deps of libobs, OBS Studio and CEF
42 "luajit" # Deps of Scripting plugin
43 "mbedtls>=$_mbedtlsver" # Deps of OBS Studio and Outputs plugin
44 "pciutils" # Deps of FFmpeg plugin
45 "python>=$_pythonver" # Deps of Scripting plugin
46 "qrcodegencpp-cmake" # Deps of Websocket plugin
47 "qt6-base>=$_qtver" # Deps of OBS Studio and any frontend plugin
48 "qt6-svg>=$_qtver" # Deps of OBS Studio
49 "rnnoise" # Deps if the filter plugin
50 "simde" # Deps of libobs and its headers
51 "sndio" # Deps of sndio plugin
52 "speexdsp" # Deps if the filter plugin
53 "srt" # Deps of FFmpeg plugin
54 "systemd-libs" # Deps of V4L2 plugin
55 "util-linux-libs" # Deps of libobs
56 "v4l-utils" # Deps of V4L2 plugin
57 "vlc-luajit" # Deps of VLC Plugin ("vlc" issue crashes)
58 "wayland" # Deps of libobs, libobs-opengl and CEF
59 "x264" # Deps of the X264 plugin
60 "zlib" # Deps of libobs
61
62 # Deps of CEF
63 "at-spi2-core" "cairo" "dbus" "expat" "libcups" "libdrm"
64 "libxdamage" "libxext" "libxfixes" "libxrandr" "mesa" "nspr"
65 "nss" "pango"
66)
67## About vlc-luajit
68# The official VLC package will make OBS crash when a VLC source is used.
69# The issue is that VLC and OBS are compiled with different lua version.
70# So I also created vlc-luajit, a VLC package compiled with the same lua as OBS.
71# But to make people unable to install VLC official package with obs-studio-tytan652.
72# I decided to make vlc-luajit a dependency of OBS rather than an optional one.
73## About ffmpeg-obs
74# Read ffmpeg-obs PKGBUILD for more info
75makedepends=(
76 "asio" # Deps of Websocket plugin (headers-only lib)
77 "cmake"
78 "extra-cmake-modules"
79 "ffnvcodec-headers" # Deps of NVENC plugin (headers-only lib)
80 "git"
81 "uthash" # Deps of libobs (headers-only lib)
82 "nlohmann-json" # Deps of Websocket plugin (headers-only lib)
83 "swig" # Deps of Scripting plugin
84 "websocketpp" # Deps of Websocket plugin (headers-only lib)
85)
86optdepends=(
87 "intel-media-sdk: QSV encoder support(<= Rocket Lake & >= Broadwell)"
88 "vpl-gpu-rt: QSV encoder support (>= Alder Lake)"
89 "intel-media-driver: VAAPI encoder support (>= Broadwell)"
90 "libva-intel-driver: VAAPI encoder support (<= Haswell)"
91 "libva-mesa-driver: VAAPI encoder support"
92 "v4l2loopback-dkms: V4L2 virtual camera output"
93)
94provides=(
95 "obs-studio=$pkgver" "obs-vst" "obs-websocket" "obs-browser"
96 "obs-studio-plugin-browser"
97)
98conflicts=(
99 "obs-studio" "obs-vst" "obs-websocket" "obs-browser"
100 "obs-linuxbrowser" # This plugin is obsolete
101 "libva-vdpau-driver" # This driver is abandonned and make OBS segfault if it happen to be loaded, try libva-nvidia-driver is you really need Nvidia decode through VAAPI
102 "obs-studio-plugin-browser"
103)
104options=('debug')
105source=(
106 "obs-studio::git+https://github.com/obsproject/obs-studio.git#tag=$_pkgver"
107 "obs-browser::git+https://github.com/obsproject/obs-browser.git"
108 "obs-websocket::git+https://github.com/obsproject/obs-websocket.git"
109 "bind_iface_eyeballed.patch" # Based on https://github.com/tytan652/obs-studio/commits/bind_iface_eyeballed3
110 "10136-Add_ROI_support_for_VAAPI.patch" # https://github.com/obsproject/obs-studio/pull/10136
111)
112source_x86_64=("https://cdn-fastly.obsproject.com/downloads/cef_binary_6533_linux_x86_64_v6.tar.xz")
113source_aarch64=("https://cdn-fastly.obsproject.com/downloads/cef_binary_6533_linux_aarch64_v6.tar.xz")
114sha256sums=(
115 "SKIP"
116 "SKIP"
117 "SKIP"
118 "785b95a8b51864ece25b307246a29ddf80e7e7d4d77fe7d557df73f68329f16d"
119 "6739b632ca2275e189f0214c4843b8accc1c9d2bdff81d0f169ec1de4c02096c"
120)
121sha256sums_x86_64=("7963335519a19ccdc5233f7334c5ab023026e2f3e9a0cc417007c09d86608146")
122sha256sums_aarch64=("642514469eaa29a5c887891084d2e73f7dc2d7405f7dfa7726b2dbc24b309999")
123
124if [[ ${CARCH/%_v?/} == 'x86_64' ]]; then
125 optdepends+=("decklink: Blackmagic Design DeckLink support")
126fi
127
128prepare() {
129 cd "$srcdir/obs-studio"
130 git config submodule.plugins/obs-browser.url $srcdir/obs-browser
131 git config submodule.plugins/obs-websocket.url $srcdir/obs-websocket
132 git -c protocol.file.allow=always submodule update
133
134 ## Mark log and titlebar version
135 sed -i "s|obs_get_version_string()|\"$_pkgver-$_suffix-$pkgrel\"|" frontend/OBSApp.cpp
136
137 # Keep sentinel file functional without messing with compile flags
138 sed -i "s|#ifndef NDEBUG|#if 0|" frontend/utility/CrashHandler.cpp
139
140 ## Add network interface binding for RTMP on Linux (https://github.com/tytan652/obs-studio/commits/bind_iface_eyeballed)
141 patch -Np1 -i "$srcdir/bind_iface_eyeballed.patch"
142
143 ## obs-ffmpeg: Add ROI support for VAAPI (https://github.com/obsproject/obs-studio/pull/10136)
144 patch -Np1 -i "$srcdir/10136-Add_ROI_support_for_VAAPI.patch"
145}
146
147build() {
148 cmake -B build -S obs-studio \
149 -DCMAKE_BUILD_TYPE=None \
150 -DCMAKE_INSTALL_PREFIX=/usr \
151 -DCMAKE_INSTALL_LIBDIR=lib \
152 -DENABLE_LIBFDK=ON \
153 -DENABLE_JACK=ON \
154 -DENABLE_SNDIO=ON \
155 -DENABLE_BROWSER=ON \
156 -DCEF_ROOT_DIR="$srcdir/cef_binary_6533_linux_${CARCH/%_v?/}" \
157 -DOBS_VERSION_OVERRIDE="$_pkgver" \
158 -DOBS_COMPILE_DEPRECATION_AS_WARNING=ON \
159 -Wno-dev
160
161 cmake --build build
162}
163
164package() {
165 DESTDIR="$pkgdir" cmake --install build
166}
167

Changes since previous scan

--- PKGBUILD @ 2026-07-27 00:24
+++ PKGBUILD @ 2026-08-03 00:08
@@ -4,14 +4,14 @@
pkgname="obs-studio-${_suffix}"
_pkgver=32.2.0
pkgver="${_pkgver//-/_}"
-pkgrel=1
+pkgrel=2
pkgdesc="Free and open source software for video recording and live streaming. With everything except service integrations. Plus my bind interface PR, and sometimes backported fixes"
arch=("x86_64" "aarch64")
url="https://github.com/obsproject/obs-studio"
license=('GPL-2.0-or-later')
# To manage dependency rebuild easily, this will prevent you to rebuild OBS on non-updated system
_qtver=6.11
-_libajantv2ver=17.5.0
+_libajantv2ver=18.0.0
_libdatachannelver=0.24.3
_mbedtlsver=3.6.1
_pythonver=3.14

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 07:34:55 MEDIUM 1
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 07:20:00 MEDIUM 1
2026-06-20 00:18:46 CLEAN 2
2026-06-19 23:51:18 MEDIUM 2
2026-06-19 19:07:35 LOW 2
2026-06-18 16:11:54 MEDIUM 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion