teb-obs

maintainer eliteschw31n · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source uses a non-standard host for CEF (cdn-fastly.obsproject.com), but it is the official release infrastructure of the OBS project, making it a legitimate and expected source; all other sources are from trusted Git repositories, and the build process is standard.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source uses a non-standard host for CEF (cdn-fastly.obsproject.com), but it is the official release infrastructure of the OBS project, making it a legitimate and expected source; all other sources are from trusted Git repositories, and the build process is standard.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:96 "https://cdn-fastly.obsproject.com/downloads/$_cefver.tar.xz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Thomas Ludwig <business at tludwig dot dev>
    
      2
    
      3pkgname=teb-obs
    
      4pkgver=32.1.0
    
      5pkgrel=1
    
      6pkgdesc="Free, open source software for live streaming and recording. With Browser Source support. Without the need to install ffmpeg-obs, etc."
    
      7arch=('x86_64')
    
      8url="https://github.com/amazon-contributing/upstreaming-to-obs-studio/wiki/TEB-Beta-Linux-Installation"
    
      9license=('GPL-2.0-or-later')
    
      10_obsversion="32.1.0-enhanced-broadcasting-v62"
    
      11_obsversionbranch="release/v62"
    
      12_qtver=6.10.0
    
      13#_libajantv2ver=17.5.0
    
      14_libdatachannelver=0.24
    
      15_mbedtlsver=3.6.1
    
      16_pythonver=3.14
    
      17_cefver=cef_binary_6533_linux_x86_64_v6
    
      18depends=(
    
      19  "alsa-lib" # Deps of ALSA plugin and CEF
    
      20  "curl" # Deps of OBS Studio and rtmp-services plugin
    
      21  "ffmpeg>=8" # Deps of OBS Studio and FFmpeg plugin
    
      22  "fontconfig" # Deps of Freetype2 plugin
    
      23  "freetype2" # Deps of Freetype2 plugin
    
      24  "gcc-libs" # Deps of any C++ related binary
    
      25  "glib2" # Deps of libobs, PipeWire plugin and CEF
    
      26  "glibc" # Deps of any C related binary
    
      27  "jack" # Deps of JACK plugin
    
      28  "jansson" # Deps of libobs and rtmp-services plugin
    
      29  #"libajantv2>=$_libajantv2ver" # Deps of AJA plugins
    
      30  "libdatachannel>=$_libdatachannelver" # Deps of WebRTC plugin (NICE variant like the Flatpak)
    
      31  "libfdk-aac" # Deps of FDK AAC plugin
    
      32  "libgl" # Deps of libobs-opengl and OBS Studio
    
      33  "libjuice" # UDP Interactive Connectivity Establishment (ICE) library
    
      34  "libpipewire" # Deps of the PipeWire plugin
    
      35  "libpulse" # Deps of PulseAudio monitoring (in libobs) and PulseAudio plugin
    
      36  "librist" # Deps of FFmpeg plugin
    
      37  "libva" # Deps of FFmpeg plugin and QSV plugin
    
      38  "libvpl" # Deps of QSV plugin
    
      39  "libx11" # Deps of libobs, libobs-opengl, X11 Capture plugin, frontend tools plugin, obs-browser and CEF
    
      40  "libxcb" # Deps of libobs-opengl, X11 Capture plugin and CEF
    
      41  "libxcomposite" # Deps of the X11 capture plugin
    
      42  "libxkbcommon" # Deps of libobs, OBS Studio and CEF
    
      43  "luajit" # Deps of Scripting plugin
    
      44  "mbedtls>=$_mbedtlsver" # Deps of OBS Studio and Outputs plugin
    
      45  "pciutils" # Deps of FFmpeg plugin
    
      46  "python>=$_pythonver" # Deps of Scripting plugin
    
      47  "qrcodegencpp-cmake" # Deps of Websocket plugin
    
      48  "qt6-base>=$_qtver" # Deps of OBS Studio and any frontend plugin
    
      49  "qt6-svg>=$_qtver" # Deps of OBS Studio
    
      50  "qt6-wayland>=$_qtver" # Needed to use Qt on Wayland platform
    
      51  "rnnoise" # Deps if the filter plugin
    
      52  "simde" # Implementations of SIMD instruction sets
    
      53  "sndio" # Deps of sndio plugin
    
      54  "speexdsp" # Deps if the filter plugin
    
      55  "srt" # Deps of FFmpeg plugin
    
      56  "systemd-libs" # Deps of V4L2 plugin
    
      57  "util-linux-libs" # Deps of libobs
    
      58  "v4l-utils" # Deps of V4L2 plugin
    
      59  "vlc" # It is necessary to build the package and work
    
      60  "wayland" # Deps of libobs, libobs-opengl and CEF
    
      61  "x264" # Deps of the X264 plugin
    
      62  "zlib" # Deps of libobs
    
      63
    
      64  # Deps of CEF
    
      65  "at-spi2-core" "cairo" "dbus" "expat" "libcups" "libdrm"
    
      66  "libxdamage" "libxext" "libxfixes" "libxrandr" "mesa" "nspr"
    
      67  "nss" "pango"
    
      68)
    
      69makedepends=(
    
      70  "asio" # Deps of Websocket plugin (headers-only lib)
    
      71  "cmake"
    
      72  "extra-cmake-modules"
    
      73  "ffnvcodec-headers" # Deps of NVENC plugin (headers-only lib)
    
      74  "git"
    
      75  "uthash" # Deps of libobs (headers-only lib)
    
      76  "nlohmann-json" # Deps of Websocket plugin (headers-only lib)
    
      77  "swig" # Deps of Scripting plugin
    
      78  "websocketpp" # Deps of Websocket plugin (headers-only lib)
    
      79)
    
      80optdepends=(
    
      81  "intel-media-sdk: QSV encoder support(<= Rocket Lake & >= Broadwell)"
    
      82  "vpl-gpu-rt: QSV encoder support (>= Alder Lake)"
    
      83  "intel-media-driver: VAAPI encoder support (>= Broadwell)"
    
      84  "libva-intel-driver: VAAPI encoder support (<= Haswell)"
    
      85  "libva-mesa-driver: VAAPI encoder support"
    
      86  "v4l2loopback-dkms: V4L2 virtual camera output"
    
      87  "obs-source-profiler-bin: Profile the Usages of your Sources"
    
      88  "obs-vertical-canvas-bin: For Dual Format Beta"
    
      89)
    
      90provides=("obs-studio=$pkgver" "obs-vst" "obs-websocket" "obs-browser")
    
      91conflicts=("obs-studio" "obs-websocket" "obs-browser" "obs-linuxbrowser" "obs-studio-tytan652" "obs-studio-git" "obs-studio-amf" "obs-studio-browser" "obs-vst" "obs-studio-liberty")
    
      92source=(
    
      93  "obs-studio::git+https://github.com/amazon-contributing/upstreaming-to-obs-studio#branch=$_obsversionbranch"
    
      94  "obs-browser::git+https://github.com/obsproject/obs-browser.git"
    
      95  "obs-websocket::git+https://github.com/obsproject/obs-websocket.git"
    
      96  "https://cdn-fastly.obsproject.com/downloads/$_cefver.tar.xz"
    
      97#  "qt_fix.patch"
    
      98)
    
      99sha256sums=(
    
      100  "SKIP"
    
      101  "SKIP"
    
      102  "SKIP"
    
      103  "SKIP"
    
      104#  "SKIP"
    
      105)
    
      106
    
      107prepare() {
    
      108  cd "$srcdir/obs-studio"
    
      109  git config submodule.plugins/obs-browser.url $srcdir/obs-browser
    
      110  git config submodule.plugins/obs-websocket.url $srcdir/obs-websocket
    
      111
    
      112  git -c protocol.file.allow=always submodule update
    
      113
    
      114#  patch -Np1 -i $srcdir/qt_fix.patch
    
      115}
    
      116
    
      117build() {
    
      118  cmake -B build -S obs-studio \
    
      119    -DCMAKE_BUILD_TYPE=Release \
    
      120    -DCMAKE_INSTALL_PREFIX=/usr \
    
      121    -DCMAKE_INSTALL_LIBDIR=lib \
    
      122    -DENABLE_LIBFDK=ON \
    
      123    -DENABLE_JACK=ON \
    
      124    -DENABLE_SNDIO=ON \
    
      125    -DENABLE_BROWSER=ON \
    
      126    -DENABLE_NVENC=ON \
    
      127    -DENABLE_AJA=OFF \
    
      128    -DCEF_ROOT_DIR="$srcdir/${_cefver/%_v?/}" \
    
      129    -DOBS_VERSION_OVERRIDE="${_obsversion}" \
    
      130    -DOBS_COMPILE_DEPRECATION_AS_WARNING=ON \
    
      131    -Wno-dev \
    
      132    -DCMAKE_CXX_FLAGS="-Wno-error=deprecated-declarations"
    
      133
    
      134  cmake --build build
    
      135}
    
      136
    
      137package() {
    
      138  DESTDIR="$pkgdir" cmake --install build
    
      139}
    
      140

Changes since previous scan

--- PKGBUILD @ 2026-07-28 00:07
+++ PKGBUILD @ 2026-08-03 00:08
@@ -10,7 +10,7 @@
 _obsversion="32.1.0-enhanced-broadcasting-v62"
 _obsversionbranch="release/v62"
 _qtver=6.10.0
-_libajantv2ver=17.5.0
+#_libajantv2ver=17.5.0
 _libdatachannelver=0.24
 _mbedtlsver=3.6.1
 _pythonver=3.14
@@ -26,7 +26,7 @@
   "glibc" # Deps of any C related binary
   "jack" # Deps of JACK plugin
   "jansson" # Deps of libobs and rtmp-services plugin
-  "libajantv2>=$_libajantv2ver" # Deps of AJA plugins
+  #"libajantv2>=$_libajantv2ver" # Deps of AJA plugins
   "libdatachannel>=$_libdatachannelver" # Deps of WebRTC plugin (NICE variant like the Flatpak)
   "libfdk-aac" # Deps of FDK AAC plugin
   "libgl" # Deps of libobs-opengl and OBS Studio
@@ -124,6 +124,7 @@
     -DENABLE_SNDIO=ON \
     -DENABLE_BROWSER=ON \
     -DENABLE_NVENC=ON \
+    -DENABLE_AJA=OFF \
     -DCEF_ROOT_DIR="$srcdir/${_cefver/%_v?/}" \
     -DOBS_VERSION_OVERRIDE="${_obsversion}" \
     -DOBS_COMPILE_DEPRECATION_AS_WARNING=ON \

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 15:39:03	MEDIUM	1
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2