vimix

maintainer tecnotercio · 3 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads source code from GitHub and SourceForge, which are standard development platforms; despite SKIP'd checksums, all sources are from legitimate project repositories and are used to build the software from source, which is normal for AUR packages.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads source code from GitHub and SourceForge, which are standard development platforms; despite SKIP'd checksums, all sources are from legitimate project repositories and are used to build the software from source, which is normal for AUR packages.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:33 "tinyfiledialogs::git+https://git.code.sf.net/p/tinyfiledialogs/code#commit=${_tinyfiledialogs_commit}"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Tércio Martins <echo dGVyY2lvd2VuZGVsQGdtYWlsLmNvbQo= | base64 -d>
    
      2
    
      3_dirent_commit=c885633e126a3a949ec0497273ec13e2c03e862c
    
      4_ImGuiColorTextEdit_commit=0a88824f7de8d0bd11d8419066caa7d3469395c4
    
      5_glm_commit=da9a21d7e3a2a3a32354a7d9da362d5738b113b6
    
      6_imgui_commit=5503c0a12e0c929e84b3f61b2cb4bb9177ea3da1
    
      7_link_commit=14f6cc99ac41466d52ce780aa37e432fe92c289b
    
      8_miniz_commit=5cf1e56a9c968c11fdd1a6414f3a95f84314c437
    
      9_SDL_GameControllerDB_commit=2b71fffae463ecaa08391c86cfd8a9f1842389af
    
      10_stb_commit=f1c79c02822848a9bed4315b12c8c8f3761e1296
    
      11_tinyfiledialogs_commit=2681e426ddaebc8e2764a7823b4b9d69564d1684
    
      12_asio_commit=01b4e87c04abd4daec58e40463bcdc150085b269
    
      13
    
      14pkgname=vimix
    
      15pkgver=0.9.1a
    
      16pkgrel=1
    
      17arch=('x86_64')
    
      18pkgdesc="Live video editor"
    
      19url="https://brunoherbelin.github.io/vimix/"
    
      20license=('GPL-3.0-or-later')
    
      21depends=('glfw' 'gst-libav' 'gst-plugins-bad' 'gst-plugins-base' 'gst-plugins-good' 'gst-plugins-ugly' 'gtk3' 'icu' 'tinyxml2')
    
      22makedepends=('cmake' 'git' 'ninja')
    
      23options=('!debug')
    
      24source=("$pkgname-$pkgver.tar.gz::https://github.com/brunoherbelin/vimix/archive/refs/tags/$pkgver.tar.gz"
    
      25	"dirent-${_dirent_commit}.tar.gz::https://github.com/tronkko/dirent/archive/${_dirent_commit}.tar.gz"
    
      26        "ImGuiColorTextEdit-${_ImGuiColorTextEdit_commit}.tar.gz::https://github.com/BalazsJako/ImGuiColorTextEdit/archive/${_ImGuiColorTextEdit_commit}.tar.gz"
    
      27        "glm-${_glm_commit}.tar.gz::https://github.com/g-truc/glm/archive/${_glm_commit}.tar.gz"
    
      28        "imgui-${_imgui_commit}.tar.gz::https://github.com/ocornut/imgui/archive/${_imgui_commit}.tar.gz"
    
      29        "link-${_link_commit}.tar.gz::https://github.com/Ableton/link/archive/${_link_commit}.tar.gz"
    
      30        "miniz-${_miniz_commit}.tar.gz::https://github.com/richgel999/miniz/archive/${_miniz_commit}.tar.gz"
    
      31        "SDL_GameControllerDB-${_SDL_GameControllerDB_commit}.tar.gz::https://github.com/mdqinc/SDL_GameControllerDB/archive/${_SDL_GameControllerDB_commit}.tar.gz"
    
      32        "stb-${_stb_commit}.tar.gz::https://github.com/nothings/stb/archive/${_stb_commit}.tar.gz"
    
      33        "tinyfiledialogs::git+https://git.code.sf.net/p/tinyfiledialogs/code#commit=${_tinyfiledialogs_commit}"
    
      34        "asio-${_asio_commit}.tar.gz::https://github.com/chriskohlhoff/asio/archive/${_asio_commit}.tar.gz")
    
      35b2sums=('c75966bb5b2294fe49fb0e37795b45e1dfd49a93f194f6e39a2b40eb3319dc2a226f65ee1621e79fc03c587cb0b5145507b9a411d589133482c937002d1d1011'
    
      36        'SKIP'
    
      37        'SKIP'
    
      38        'SKIP'
    
      39        'SKIP'
    
      40        'SKIP'
    
      41        'SKIP'
    
      42        'SKIP'
    
      43        'SKIP'
    
      44        'SKIP'
    
      45        'SKIP')
    
      46
    
      47prepare() {
    
      48  tar -xzf "dirent-${_dirent_commit}.tar.gz" --strip 1 \
    
      49      -C   "$pkgname-$pkgver/ext/Dirent/"
    
      50  tar -xzf "ImGuiColorTextEdit-${_ImGuiColorTextEdit_commit}.tar.gz" --strip 1 \
    
      51      -C   "$pkgname-$pkgver/ext/ImGuiColorTextEdit/"
    
      52  tar -xzf "glm-${_glm_commit}.tar.gz" --strip 1 \
    
      53      -C   "$pkgname-$pkgver/ext/glm/"
    
      54  tar -xzf "imgui-${_imgui_commit}.tar.gz" --strip 1 \
    
      55      -C   "$pkgname-$pkgver/ext/imgui/"
    
      56  tar -xzf "link-${_link_commit}.tar.gz" --strip 1 \
    
      57      -C   "$pkgname-$pkgver/ext/link/"
    
      58  tar -xzf "miniz-${_miniz_commit}.tar.gz" --strip 1 \
    
      59      -C   "$pkgname-$pkgver/ext/miniz/"
    
      60  tar -xzf "SDL_GameControllerDB-${_SDL_GameControllerDB_commit}.tar.gz" --strip 1 \
    
      61      -C   "$pkgname-$pkgver/ext/mdqinc/"
    
      62  tar -xzf "stb-${_stb_commit}.tar.gz" --strip 1 \
    
      63      -C   "$pkgname-$pkgver/ext/stb/"
    
      64  tar -xzf "asio-${_asio_commit}.tar.gz" --strip 1 \
    
      65      -C   "$pkgname-$pkgver/ext/link/modules/asio-standalone/"
    
      66
    
      67  git clone "$srcdir/tinyfiledialogs" \
    
      68            "$pkgname-$pkgver/ext/tfd/"
    
      69
    
      70  sed -i 's|${SNAP}/meta/gui/||' \
    
      71         "$pkgname-$pkgver/snap/gui/$pkgname.desktop"
    
      72}
    
      73
    
      74build() {
    
      75  cd $pkgname-$pkgver
    
      76  cmake -GNinja \
    
      77        -Bbuild \
    
      78        -DCMAKE_BUILD_TYPE=Release \
    
      79        -DCMAKE_INSTALL_PREFIX=/usr
    
      80  ninja -C build/
    
      81}
    
      82
    
      83package() {
    
      84  cd $pkgname-$pkgver
    
      85  DESTDIR="$pkgdir" ninja -C build/ install
    
      86
    
      87  install -Dm 644 snap/gui/$pkgname.desktop \
    
      88                 "$pkgdir"/usr/share/applications/$pkgname.desktop
    
      89  install -Dm 644 snap/gui/$pkgname.svg \
    
      90                 "$pkgdir"/usr/share/icons/hicolor/scalable/apps/$pkgname.svg
    
      91}
    
      92

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2