shadps4-git
LOW
maintainer abouvier
15 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package builds from source using git repositories hosted on GitHub and Google's android.googlesource.com, which are legitimate developer platforms; the non-standard host refers to a source URL for a submodule, but all sources are openly accessible and used to compile the emulator, with no evidence of malicious or unverifiable code execution.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from source using git repositories hosted on GitHub and Google's android.googlesource.com, which are legitimate developer platforms; the non-standard host refers to a source URL for a submodule, but all sources are openly accessible and used to compile the emulator, with no evidence of malicious or unverifiable code execution.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:70
"aac::git+https://android.googlesource.com/platform/external/aac.git"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Alexandre Bouvier <contact@amb.tf>
2
_pkgname=shadps4
3
pkgname=$_pkgname-git
4
pkgver=0.18.0.r62.g22fb56d
5
pkgrel=1
6
pkgdesc="Sony PlayStation 4 emulator (CLI)"
7
arch=('aarch64' 'x86_64')
8
url="https://shadps4.net/"
9
license=('GPL-2.0-or-later')
10
depends=(
11
'abseil-cpp' # protobuf dependency
12
'glibc'
13
'glslang>=15'
14
'miniz>=3.1'
15
'pugixml>=1.14'
16
'sdl3>=3.3.5'
17
)
18
makedepends=(
19
'boost>=1.84'
20
'cli11>=2.6.1'
21
'cmake>=3.16.3'
22
'ffmpeg>=2:5.1.2'
23
'fmt>=12'
24
'freetype2>=2.14.1'
25
'git'
26
'half>=1.12'
27
'libgcc'
28
'libpng>=1.6'
29
'libstdc++'
30
'magic_enum>=0.9.7'
31
'miniupnpc>=2.3.3'
32
'nlohmann-json>=3.12'
33
'openal'
34
'openssl'
35
'rapidjson'
36
'renderdoc'
37
'robin-map>=1.3'
38
'spirv-headers' # sirit dependency
39
'stb'
40
'systemd-libs'
41
'toml11>=4.2'
42
'util-linux-libs'
43
'vulkan-headers>=1:1.4.330'
44
'vulkan-memory-allocator>=3.1'
45
'xbyak>=7.07'
46
'xxhash>=0.8.2'
47
'zarchive>=0.1.2'
48
'zlib'
49
'zycore-c' # zydis dependency
50
)
51
optdepends=(
52
'renderdoc: for graphics debugging'
53
'shadps4-qtlauncher: for official Qt GUI'
54
'vulkan-validation-layers: for vulkan debugging'
55
)
56
provides=("$_pkgname=$pkgver")
57
conflicts=("$_pkgname")
58
source=(
59
"$_pkgname::git+https://github.com/shadps4-emu/shadPS4.git"
60
"$_pkgname-cpp-httplib::git+https://github.com/shadexternals/cpp-httplib.git"
61
"$_pkgname-discord-rpc::git+https://github.com/shadps4-emu/ext-discord-rpc.git"
62
"$_pkgname-hwinfo::git+https://github.com/shadps4-emu/ext-hwinfo.git"
63
"$_pkgname-imgui::git+https://github.com/shadexternals/imgui.git"
64
"$_pkgname-imguifiledialog::git+https://github.com/shadexternals/ImGuiFileDialog.git"
65
"$_pkgname-libatrac9::git+https://github.com/shadps4-emu/ext-LibAtrac9.git"
66
"$_pkgname-libusb::git+https://github.com/shadexternals/libusb.git"
67
"$_pkgname-protobuf::git+https://github.com/shadexternals/protobuf.git"
68
"$_pkgname-sirit::git+https://github.com/shadps4-emu/sirit.git"
69
"$_pkgname-tracy::git+https://github.com/shadps4-emu/tracy.git"
70
"aac::git+https://android.googlesource.com/platform/external/aac.git"
71
"minimp3::git+https://github.com/lieff/minimp3.git"
72
"spdlog::git+https://github.com/gabime/spdlog.git"
73
"zydis::git+https://github.com/zyantific/zydis.git"
74
)
75
b2sums=('SKIP'{,,,,,,,,,,,,,,})
76
77
pkgver() {
78
cd $_pkgname
79
git describe --long --abbrev=7 | sed 's/^v\.\?//;s/[^-]*-g/r&/;s/-/./g'
80
}
81
82
prepare() {
83
cd $_pkgname
84
git config submodule.externals/aacdec/fdk-aac.url ../aac
85
git config submodule.externals/cpp-httplib.url ../$_pkgname-cpp-httplib
86
git config submodule.externals/discord-rpc.url ../$_pkgname-discord-rpc
87
git config submodule.externals/hwinfo.url ../$_pkgname-hwinfo
88
git config submodule.externals/imgui.url ../$_pkgname-imgui
89
git config submodule.externals/ImGuiFileDialog.url ../$_pkgname-imguifiledialog
90
git config submodule.externals/LibAtrac9.url ../$_pkgname-libatrac9
91
git config submodule.externals/libusb.url ../$_pkgname-libusb
92
git config submodule.externals/minimp3.url ../minimp3
93
git config submodule.externals/protobuf.url ../$_pkgname-protobuf
94
git config submodule.externals/sirit.url ../$_pkgname-sirit
95
git config submodule.externals/spdlog.url ../spdlog
96
git config submodule.externals/tracy.url ../$_pkgname-tracy
97
git config submodule.externals/zydis.url ../zydis
98
git -c protocol.file.allow=always submodule update
99
# use makepkg.conf flags
100
sed -i '/-march=/d' CMakeLists.txt
101
# use system abseil-cpp
102
sed -i '/find_package/s/absl.*/absl CONFIG)/' CMakeLists.txt
103
# use system glslang
104
sed -i '/find_package/s/glslang.*/glslang CONFIG)/' CMakeLists.txt
105
# use system openssl
106
sed -i '/find_package/s/LibreSSL.*/OpenSSL CONFIG)/' CMakeLists.txt
107
}
108
109
build() {
110
local options=(
111
-B ../build
112
-D CMAKE_BUILD_TYPE=Release
113
-D CMAKE_C_FLAGS_RELEASE="-DNDEBUG"
114
-D CMAKE_CXX_FLAGS_RELEASE="-DNDEBUG"
115
-D CMAKE_INSTALL_PREFIX=/usr
116
-D CMAKE_SKIP_INSTALL_RPATH=ON
117
-D ENABLE_SYSTEM_LIBRARIES=ON
118
-D ENABLE_UPDATER=OFF
119
-D SIRIT_USE_SYSTEM_SPIRV_HEADERS=ON
120
-W no-dev
121
)
122
cd $_pkgname
123
cmake "${options[@]}"
124
cmake --build ../build
125
}
126
127
package() {
128
depends+=(
129
'libavcodec.so'
130
'libavformat.so'
131
'libavutil.so'
132
'libcrypto.so'
133
'libfmt.so'
134
'libfreetype.so'
135
'libgcc_s.so'
136
'libminiupnpc.so'
137
'libopenal.so'
138
'libpng16.so'
139
'libssl.so'
140
'libstdc++.so'
141
'libswresample.so'
142
'libswscale.so'
143
'libudev.so'
144
'libuuid.so'
145
'libxxhash.so'
146
'libz.so'
147
'libzarchive.so'
148
)
149
150
# shellcheck disable=SC2154
151
DESTDIR="$pkgdir" cmake --install build
152
}
153
Changes since previous scan
--- PKGBUILD @ 2026-09-04 00:03+++ PKGBUILD @ 2026-09-17 00:27@@ -1,7 +1,7 @@ # Maintainer: Alexandre Bouvier <contact@amb.tf> _pkgname=shadps4 pkgname=$_pkgname-git-pkgver=0.18.0.r29.g8ca1d49+pkgver=0.18.0.r62.g22fb56d pkgrel=1 pkgdesc="Sony PlayStation 4 emulator (CLI)" arch=('aarch64' 'x86_64')@@ -60,7 +60,7 @@ "$_pkgname-cpp-httplib::git+https://github.com/shadexternals/cpp-httplib.git" "$_pkgname-discord-rpc::git+https://github.com/shadps4-emu/ext-discord-rpc.git" "$_pkgname-hwinfo::git+https://github.com/shadps4-emu/ext-hwinfo.git"- "$_pkgname-imgui::git+https://github.com/shadps4-emu/ext-imgui.git"+ "$_pkgname-imgui::git+https://github.com/shadexternals/imgui.git" "$_pkgname-imguifiledialog::git+https://github.com/shadexternals/ImGuiFileDialog.git" "$_pkgname-libatrac9::git+https://github.com/shadps4-emu/ext-LibAtrac9.git" "$_pkgname-libusb::git+https://github.com/shadexternals/libusb.git"@@ -83,9 +83,9 @@ cd $_pkgname git config submodule.externals/aacdec/fdk-aac.url ../aac git config submodule.externals/cpp-httplib.url ../$_pkgname-cpp-httplib- git config submodule.externals/dear_imgui.url ../$_pkgname-imgui git config submodule.externals/discord-rpc.url ../$_pkgname-discord-rpc git config submodule.externals/hwinfo.url ../$_pkgname-hwinfo+ git config submodule.externals/imgui.url ../$_pkgname-imgui git config submodule.externals/ImGuiFileDialog.url ../$_pkgname-imguifiledialog git config submodule.externals/LibAtrac9.url ../$_pkgname-libatrac9 git config submodule.externals/libusb.url ../$_pkgname-libusbScan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 23:58:52 | Medium | 1 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |