teb-obs
The package builds from source using official project repositories and a CEF binary from the project's own CDN; while the host is not whitelisted, it is plausibly official and no untrusted executable code is downloaded or executed.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from source using official project repositories and a CEF binary from the project's own CDN; while the host is not whitelisted, it is plausibly official and no untrusted executable code is downloaded or executed.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:96
"https://cdn-fastly.obsproject.com/downloads/$_cefver.tar.xz"
PKGBUILD
1 offending line(s) highlighted# Maintainer: Thomas Ludwig <business at tludwig dot dev>
pkgname=teb-obs
pkgver=32.1.0
pkgrel=2
pkgdesc="Free, open source software for live streaming and recording. With Browser Source support. Without the need to install ffmpeg-obs, etc."
arch=('x86_64')
url="https://github.com/amazon-contributing/upstreaming-to-obs-studio/wiki/TEB-Beta-Linux-Installation"
license=('GPL-2.0-or-later')
_obsversion="32.1.0-enhanced-broadcasting-v62"
_obsversionbranch="release/v62"
_qtver=6.10.0
#_libajantv2ver=17.5.0
_libdatachannelver=0.24
_mbedtlsver=3.6.1
_pythonver=3.14
_cefver=cef_binary_6533_linux_x86_64_v6
depends=(
"alsa-lib" # Deps of ALSA plugin and CEF
"curl" # Deps of OBS Studio and rtmp-services plugin
"ffmpeg>=9" # Deps of OBS Studio and FFmpeg plugin
"fontconfig" # Deps of Freetype2 plugin
"freetype2" # Deps of Freetype2 plugin
"gcc-libs" # Deps of any C++ related binary
"glib2" # Deps of libobs, PipeWire plugin and CEF
"glibc" # Deps of any C related binary
"jack" # Deps of JACK plugin
"jansson" # Deps of libobs and rtmp-services plugin
#"libajantv2>=$_libajantv2ver" # Deps of AJA plugins
"libdatachannel>=$_libdatachannelver" # Deps of WebRTC plugin (NICE variant like the Flatpak)
"libfdk-aac" # Deps of FDK AAC plugin
"libgl" # Deps of libobs-opengl and OBS Studio
"libjuice" # UDP Interactive Connectivity Establishment (ICE) library
"libpipewire" # Deps of the PipeWire plugin
"libpulse" # Deps of PulseAudio monitoring (in libobs) and PulseAudio plugin
"librist" # Deps of FFmpeg plugin
"libva" # Deps of FFmpeg plugin and QSV plugin
"libvpl" # Deps of QSV plugin
"libx11" # Deps of libobs, libobs-opengl, X11 Capture plugin, frontend tools plugin, obs-browser and CEF
"libxcb" # Deps of libobs-opengl, X11 Capture plugin and CEF
"libxcomposite" # Deps of the X11 capture plugin
"libxkbcommon" # Deps of libobs, OBS Studio and CEF
"luajit" # Deps of Scripting plugin
"mbedtls3>=$_mbedtlsver" # Deps of OBS Studio and Outputs plugin
"pciutils" # Deps of FFmpeg plugin
"python>=$_pythonver" # Deps of Scripting plugin
"qrcodegencpp-cmake" # Deps of Websocket plugin
"qt6-base>=$_qtver" # Deps of OBS Studio and any frontend plugin
"qt6-svg>=$_qtver" # Deps of OBS Studio
"qt6-wayland>=$_qtver" # Needed to use Qt on Wayland platform
"rnnoise" # Deps if the filter plugin
"simde" # Implementations of SIMD instruction sets
"sndio" # Deps of sndio plugin
"speexdsp" # Deps if the filter plugin
"srt" # Deps of FFmpeg plugin
"systemd-libs" # Deps of V4L2 plugin
"util-linux-libs" # Deps of libobs
"v4l-utils" # Deps of V4L2 plugin
"vlc" # It is necessary to build the package and work
"wayland" # Deps of libobs, libobs-opengl and CEF
"x264" # Deps of the X264 plugin
"zlib" # Deps of libobs
# Deps of CEF
"at-spi2-core" "cairo" "dbus" "expat" "libcups" "libdrm"
"libxdamage" "libxext" "libxfixes" "libxrandr" "mesa" "nspr"
"nss" "pango"
)
makedepends=(
"asio" # Deps of Websocket plugin (headers-only lib)
"cmake"
"extra-cmake-modules"
"ffnvcodec-headers" # Deps of NVENC plugin (headers-only lib)
"git"
"uthash" # Deps of libobs (headers-only lib)
"nlohmann-json" # Deps of Websocket plugin (headers-only lib)
"swig" # Deps of Scripting plugin
"websocketpp" # Deps of Websocket plugin (headers-only lib)
)
optdepends=(
"intel-media-sdk: QSV encoder support(<= Rocket Lake & >= Broadwell)"
"vpl-gpu-rt: QSV encoder support (>= Alder Lake)"
"intel-media-driver: VAAPI encoder support (>= Broadwell)"
"libva-intel-driver: VAAPI encoder support (<= Haswell)"
"libva-mesa-driver: VAAPI encoder support"
"v4l2loopback-dkms: V4L2 virtual camera output"
"obs-source-profiler-bin: Profile the Usages of your Sources"
"obs-vertical-canvas-bin: For Dual Format Beta"
)
provides=("obs-studio=$pkgver" "obs-vst" "obs-websocket" "obs-browser")
conflicts=("obs-studio" "obs-websocket" "obs-browser" "obs-linuxbrowser" "obs-studio-tytan652" "obs-studio-git" "obs-studio-amf" "obs-studio-browser" "obs-vst" "obs-studio-liberty")
source=(
"obs-studio::git+https://github.com/amazon-contributing/upstreaming-to-obs-studio#branch=$_obsversionbranch"
"obs-browser::git+https://github.com/obsproject/obs-browser.git"
"obs-websocket::git+https://github.com/obsproject/obs-websocket.git"
"https://cdn-fastly.obsproject.com/downloads/$_cefver.tar.xz"
# "qt_fix.patch"
)
sha256sums=(
"SKIP"
"SKIP"
"SKIP"
"SKIP"
# "SKIP"
)
prepare() {
cd "$srcdir/obs-studio"
git config submodule.plugins/obs-browser.url $srcdir/obs-browser
git config submodule.plugins/obs-websocket.url $srcdir/obs-websocket
git -c protocol.file.allow=always submodule update
# patch -Np1 -i $srcdir/qt_fix.patch
}
build() {
cmake -B build -S obs-studio \
-DCMAKE_BUILD_TYPE=Release \
-DCMAKE_INSTALL_PREFIX=/usr \
-DCMAKE_INSTALL_LIBDIR=lib \
-DENABLE_LIBFDK=ON \
-DENABLE_JACK=ON \
-DENABLE_SNDIO=ON \
-DENABLE_BROWSER=ON \
-DENABLE_NVENC=ON \
-DENABLE_AJA=OFF \
-DCEF_ROOT_DIR="$srcdir/${_cefver/%_v?/}" \
-DOBS_VERSION_OVERRIDE="${_obsversion}" \
-DOBS_COMPILE_DEPRECATION_AS_WARNING=ON \
-DMbedTLS_DIR="/usr/lib/mbedtls3/cmake/MbedTLS" \
-DMbedTLS_INCLUDE_DIR="/usr/include/mbedtls3" \
-DMbedtls_LIBRARY="/usr/lib/mbedtls3/libmbedtls.so" \
-DMbedcrypto_LIBRARY="/usr/lib/mbedtls3/libmbedcrypto.so" \
-DMbedx509_LIBRARY="/usr/lib/mbedtls3/libmbedx509.so" \
-Wno-dev \
-DCMAKE_CXX_FLAGS="-Wno-error=deprecated-declarations"
cmake --build build
}
package() {
DESTDIR="$pkgdir" cmake --install build
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |