opencv4-bin

maintainer andresperezl · 0 votes · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged The package is a prebuilt binary from a personal GitHub release, which is not inherently malicious but has limited trust due to the unverifiable build source and low maintainer visibility; however, it provides a legitimate library with no signs of code execution or exfiltration.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package is a prebuilt binary from a personal GitHub release, which is not inherently malicious but has limited trust due to the unverifiable build source and low maintainer visibility; however, it provides a legitimate library with no signs of code execution or exfiltration.

PKGBUILD

      1# Maintainer: Andres Perez <aur@andresperezl.com>
    
      2
    
      3pkgname=opencv4-bin
    
      4pkgver=4.14.0
    
      5pkgrel=1
    
      6_buildrel=1
    
      7pkgdesc="Open Source Computer Vision Library (version 4.x, prebuilt)"
    
      8arch=('x86_64')
    
      9url="https://github.com/opencv/opencv"
    
      10license=('Apache-2.0')
    
      11depends=(
    
      12  abseil-cpp
    
      13  cblas
    
      14  ffmpeg
    
      15  freetype2
    
      16  glib2
    
      17  gst-plugins-base
    
      18  gst-plugins-base-libs
    
      19  gstreamer
    
      20  harfbuzz
    
      21  lapack
    
      22  libdc1394
    
      23  libgcc
    
      24  libglvnd
    
      25  libjpeg-turbo
    
      26  libjxl
    
      27  libpng
    
      28  libstdc++
    
      29  libtiff
    
      30  libwebp
    
      31  openexr
    
      32  openjpeg2
    
      33  protobuf
    
      34  tbb
    
      35  verdict
    
      36  zlib
    
      37)
    
      38optdepends=(
    
      39  'glew: for the viz module'
    
      40  'hdf5: for the HDF5 module'
    
      41  'java-runtime: Java interface'
    
      42  'opencl-icd-loader: for coding with OpenCL'
    
      43  'qt6-base: for the HighGUI module'
    
      44  'vtk: for the viz module'
    
      45)
    
      46provides=("opencv4=$pkgver")
    
      47conflicts=('opencv4')
    
      48options=('!strip')
    
      49
    
      50_archive="opencv4-$pkgver-$_buildrel-x86_64.pkg.tar.zst"
    
      51source=("https://github.com/andresperezl/opencv4-bin/releases/download/$pkgver-$_buildrel/$_archive")
    
      52sha256sums=('b4366617ef87f6898a96ff60d16130d7a4cf865fffb96c5328afe9c83d2376bb')
    
      53
    
      54package() {
    
      55  cp -a "$srcdir/usr" "$pkgdir/"
    
      56}
    
      57

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	2
2026-08-17 00:18:29	LOW	2
2026-08-16 00:03:42	LOW	2
2026-08-15 00:26:13	LOW	2
2026-08-14 21:29:33	LOW	2