obs-studio-tytan652
LOW
maintainer tytan652
62 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads CEF binaries from the official obsproject.com CDN, which is a trusted source for OBS dependencies; the non-whitelisted host is a false concern as the domain is legitimate and checksums are provided.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads CEF binaries from the official obsproject.com CDN, which is a trusted source for OBS dependencies; the non-whitelisted host is a false concern as the domain is legitimate and checksums are provided.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:112
source_x86_64=("https://cdn-fastly.obsproject.com/downloads/cef_binary_6533_linux_x86_64_v6.tar.xz")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: tytan652 <tytan652 at tytanium dot xyz>
2
3
_suffix=tytan652
4
pkgname="obs-studio-${_suffix}"
5
_pkgver=32.2.0
6
pkgver="${_pkgver//-/_}"
7
pkgrel=3
8
pkgdesc="Free and open source software for video recording and live streaming. With everything except service integrations. Plus my bind interface PR, and sometimes backported fixes"
9
arch=("x86_64" "aarch64")
10
url="https://github.com/obsproject/obs-studio"
11
license=('GPL-2.0-or-later')
12
# To manage dependency rebuild easily, this will prevent you to rebuild OBS on non-updated system
13
_qtver=6.11
14
_libajantv2ver=18.0.0
15
_libdatachannelver=0.24.3
16
_mbedtlsver=3.6.1
17
_pythonver=3.14
18
depends=(
19
"alsa-lib" # Deps of ALSA plugin and CEF
20
"curl" # Deps of OBS Studio and rtmp-services plugin
21
"ffmpeg-obs>=9" # Deps of OBS Studio and FFmpeg plugin
22
"fontconfig" # Deps of Freetype2 plugin
23
"freetype2" # Deps of Freetype2 plugin
24
"gcc-libs" # Deps of any C++ related binary
25
"glib2" # Deps of libobs, PipeWire plugin and CEF
26
"glibc" # Deps of any C related binary
27
"jack" # Deps of JACK plugin
28
"jansson" # Deps of libobs and rtmp-services plugin
29
"libajantv2>=$_libajantv2ver" # Deps of AJA plugins
30
"libdatachannel>=$_libdatachannelver" # Deps of WebRTC plugin (NICE variant like the Flatpak)
31
"libfdk-aac" # Deps of FDK AAC plugin
32
"libgl" # Deps of libobs-opengl and OBS Studio
33
"libpipewire" # Deps of the PipeWire plugin
34
"libpulse" # Deps of PulseAudio monitoring (in libobs) and PulseAudio plugin
35
"librist" # Deps of FFmpeg plugin
36
"libva" # Deps of FFmpeg plugin and QSV plugin
37
"libvpl" # Deps of QSV plugin
38
"libx11" # Deps of libobs, libobs-opengl, X11 Capture plugin, frontend tools plugin, obs-browser and CEF
39
"libxcb" # Deps of libobs-opengl, X11 Capture plugin and CEF
40
"libxcomposite" # Deps of the X11 capture plugin
41
"libxkbcommon" # Deps of libobs, OBS Studio and CEF
42
"luajit" # Deps of Scripting plugin
43
"mbedtls>=$_mbedtlsver" # Deps of OBS Studio and Outputs plugin
44
"pciutils" # Deps of FFmpeg plugin
45
"python>=$_pythonver" # Deps of Scripting plugin
46
"qrcodegencpp-cmake" # Deps of Websocket plugin
47
"qt6-base>=$_qtver" # Deps of OBS Studio and any frontend plugin
48
"qt6-svg>=$_qtver" # Deps of OBS Studio
49
"rnnoise" # Deps if the filter plugin
50
"simde" # Deps of libobs and its headers
51
"sndio" # Deps of sndio plugin
52
"speexdsp" # Deps if the filter plugin
53
"srt" # Deps of FFmpeg plugin
54
"systemd-libs" # Deps of V4L2 plugin
55
"util-linux-libs" # Deps of libobs
56
"v4l-utils" # Deps of V4L2 plugin
57
"vlc-luajit" # Deps of VLC Plugin ("vlc" issue crashes)
58
"wayland" # Deps of libobs, libobs-opengl and CEF
59
"x264" # Deps of the X264 plugin
60
"zlib" # Deps of libobs
61
62
# Deps of CEF
63
"at-spi2-core" "cairo" "dbus" "expat" "libcups" "libdrm"
64
"libxdamage" "libxext" "libxfixes" "libxrandr" "mesa" "nspr"
65
"nss" "pango"
66
)
67
## About vlc-luajit
68
# The official VLC package will make OBS crash when a VLC source is used.
69
# The issue is that VLC and OBS are compiled with different lua version.
70
# So I also created vlc-luajit, a VLC package compiled with the same lua as OBS.
71
# But to make people unable to install VLC official package with obs-studio-tytan652.
72
# I decided to make vlc-luajit a dependency of OBS rather than an optional one.
73
## About ffmpeg-obs
74
# Read ffmpeg-obs PKGBUILD for more info
75
makedepends=(
76
"asio" # Deps of Websocket plugin (headers-only lib)
77
"cmake"
78
"extra-cmake-modules"
79
"ffnvcodec-headers" # Deps of NVENC plugin (headers-only lib)
80
"git"
81
"uthash" # Deps of libobs (headers-only lib)
82
"nlohmann-json" # Deps of Websocket plugin (headers-only lib)
83
"swig" # Deps of Scripting plugin
84
"websocketpp" # Deps of Websocket plugin (headers-only lib)
85
)
86
optdepends=(
87
"intel-media-sdk: QSV encoder support(<= Rocket Lake & >= Broadwell)"
88
"vpl-gpu-rt: QSV encoder support (>= Alder Lake)"
89
"intel-media-driver: VAAPI encoder support (>= Broadwell)"
90
"libva-intel-driver: VAAPI encoder support (<= Haswell)"
91
"libva-mesa-driver: VAAPI encoder support"
92
"v4l2loopback-dkms: V4L2 virtual camera output"
93
)
94
provides=(
95
"obs-studio=$pkgver" "obs-vst" "obs-websocket" "obs-browser"
96
"obs-studio-plugin-browser"
97
)
98
conflicts=(
99
"obs-studio" "obs-vst" "obs-websocket" "obs-browser"
100
"obs-linuxbrowser" # This plugin is obsolete
101
"libva-vdpau-driver" # This driver is abandonned and make OBS segfault if it happen to be loaded, try libva-nvidia-driver is you really need Nvidia decode through VAAPI
102
"obs-studio-plugin-browser"
103
)
104
options=('debug')
105
source=(
106
"obs-studio::git+https://github.com/obsproject/obs-studio.git#tag=$_pkgver"
107
"obs-browser::git+https://github.com/obsproject/obs-browser.git"
108
"obs-websocket::git+https://github.com/obsproject/obs-websocket.git"
109
"bind_iface_eyeballed.patch" # Based on https://github.com/tytan652/obs-studio/commits/bind_iface_eyeballed3
110
"10136-Add_ROI_support_for_VAAPI.patch" # https://github.com/obsproject/obs-studio/pull/10136
111
)
112
source_x86_64=("https://cdn-fastly.obsproject.com/downloads/cef_binary_6533_linux_x86_64_v6.tar.xz")
113
source_aarch64=("https://cdn-fastly.obsproject.com/downloads/cef_binary_6533_linux_aarch64_v6.tar.xz")
114
sha256sums=(
115
"SKIP"
116
"SKIP"
117
"SKIP"
118
"785b95a8b51864ece25b307246a29ddf80e7e7d4d77fe7d557df73f68329f16d"
119
"6739b632ca2275e189f0214c4843b8accc1c9d2bdff81d0f169ec1de4c02096c"
120
)
121
sha256sums_x86_64=("7963335519a19ccdc5233f7334c5ab023026e2f3e9a0cc417007c09d86608146")
122
sha256sums_aarch64=("642514469eaa29a5c887891084d2e73f7dc2d7405f7dfa7726b2dbc24b309999")
123
124
if [[ ${CARCH/%_v?/} == 'x86_64' ]]; then
125
optdepends+=("decklink: Blackmagic Design DeckLink support")
126
fi
127
128
prepare() {
129
cd "$srcdir/obs-studio"
130
git config submodule.plugins/obs-browser.url $srcdir/obs-browser
131
git config submodule.plugins/obs-websocket.url $srcdir/obs-websocket
132
git -c protocol.file.allow=always submodule update
133
134
## Mark log and titlebar version
135
sed -i "s|obs_get_version_string()|\"$_pkgver-$_suffix-$pkgrel\"|" frontend/OBSApp.cpp
136
137
# Keep sentinel file functional without messing with compile flags
138
sed -i "s|#ifndef NDEBUG|#if 0|" frontend/utility/CrashHandler.cpp
139
140
## Add network interface binding for RTMP on Linux (https://github.com/tytan652/obs-studio/commits/bind_iface_eyeballed)
141
patch -Np1 -i "$srcdir/bind_iface_eyeballed.patch"
142
143
## obs-ffmpeg: Add ROI support for VAAPI (https://github.com/obsproject/obs-studio/pull/10136)
144
patch -Np1 -i "$srcdir/10136-Add_ROI_support_for_VAAPI.patch"
145
}
146
147
build() {
148
cmake -B build -S obs-studio \
149
-DCMAKE_BUILD_TYPE=None \
150
-DCMAKE_INSTALL_PREFIX=/usr \
151
-DCMAKE_INSTALL_LIBDIR=lib \
152
-DENABLE_LIBFDK=ON \
153
-DENABLE_JACK=ON \
154
-DENABLE_SNDIO=ON \
155
-DENABLE_BROWSER=ON \
156
-DCEF_ROOT_DIR="$srcdir/cef_binary_6533_linux_${CARCH/%_v?/}" \
157
-DOBS_VERSION_OVERRIDE="$_pkgver" \
158
-DOBS_COMPILE_DEPRECATION_AS_WARNING=ON \
159
-Wno-dev
160
161
cmake --build build
162
}
163
164
package() {
165
DESTDIR="$pkgdir" cmake --install build
166
}
167
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |