vimix
LOW
maintainer tecnotercio
3 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads source code from GitHub and SourceForge, which are standard development platforms; despite SKIP'd checksums, all sources are from legitimate project repositories and are used to build the software from source, which is normal for AUR packages.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads source code from GitHub and SourceForge, which are standard development platforms; despite SKIP'd checksums, all sources are from legitimate project repositories and are used to build the software from source, which is normal for AUR packages.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:33
"tinyfiledialogs::git+https://git.code.sf.net/p/tinyfiledialogs/code#commit=${_tinyfiledialogs_commit}"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Tércio Martins <echo dGVyY2lvd2VuZGVsQGdtYWlsLmNvbQo= | base64 -d>
2
3
_dirent_commit=c885633e126a3a949ec0497273ec13e2c03e862c
4
_ImGuiColorTextEdit_commit=0a88824f7de8d0bd11d8419066caa7d3469395c4
5
_glm_commit=da9a21d7e3a2a3a32354a7d9da362d5738b113b6
6
_imgui_commit=5503c0a12e0c929e84b3f61b2cb4bb9177ea3da1
7
_link_commit=14f6cc99ac41466d52ce780aa37e432fe92c289b
8
_miniz_commit=5cf1e56a9c968c11fdd1a6414f3a95f84314c437
9
_SDL_GameControllerDB_commit=2b71fffae463ecaa08391c86cfd8a9f1842389af
10
_stb_commit=f1c79c02822848a9bed4315b12c8c8f3761e1296
11
_tinyfiledialogs_commit=2681e426ddaebc8e2764a7823b4b9d69564d1684
12
_asio_commit=01b4e87c04abd4daec58e40463bcdc150085b269
13
14
pkgname=vimix
15
pkgver=0.9.1a
16
pkgrel=1
17
arch=('x86_64')
18
pkgdesc="Live video editor"
19
url="https://brunoherbelin.github.io/vimix/"
20
license=('GPL-3.0-or-later')
21
depends=('glfw' 'gst-libav' 'gst-plugins-bad' 'gst-plugins-base' 'gst-plugins-good' 'gst-plugins-ugly' 'gtk3' 'icu' 'tinyxml2')
22
makedepends=('cmake' 'git' 'ninja')
23
options=('!debug')
24
source=("$pkgname-$pkgver.tar.gz::https://github.com/brunoherbelin/vimix/archive/refs/tags/$pkgver.tar.gz"
25
"dirent-${_dirent_commit}.tar.gz::https://github.com/tronkko/dirent/archive/${_dirent_commit}.tar.gz"
26
"ImGuiColorTextEdit-${_ImGuiColorTextEdit_commit}.tar.gz::https://github.com/BalazsJako/ImGuiColorTextEdit/archive/${_ImGuiColorTextEdit_commit}.tar.gz"
27
"glm-${_glm_commit}.tar.gz::https://github.com/g-truc/glm/archive/${_glm_commit}.tar.gz"
28
"imgui-${_imgui_commit}.tar.gz::https://github.com/ocornut/imgui/archive/${_imgui_commit}.tar.gz"
29
"link-${_link_commit}.tar.gz::https://github.com/Ableton/link/archive/${_link_commit}.tar.gz"
30
"miniz-${_miniz_commit}.tar.gz::https://github.com/richgel999/miniz/archive/${_miniz_commit}.tar.gz"
31
"SDL_GameControllerDB-${_SDL_GameControllerDB_commit}.tar.gz::https://github.com/mdqinc/SDL_GameControllerDB/archive/${_SDL_GameControllerDB_commit}.tar.gz"
32
"stb-${_stb_commit}.tar.gz::https://github.com/nothings/stb/archive/${_stb_commit}.tar.gz"
33
"tinyfiledialogs::git+https://git.code.sf.net/p/tinyfiledialogs/code#commit=${_tinyfiledialogs_commit}"
34
"asio-${_asio_commit}.tar.gz::https://github.com/chriskohlhoff/asio/archive/${_asio_commit}.tar.gz")
35
b2sums=('c75966bb5b2294fe49fb0e37795b45e1dfd49a93f194f6e39a2b40eb3319dc2a226f65ee1621e79fc03c587cb0b5145507b9a411d589133482c937002d1d1011'
36
'SKIP'
37
'SKIP'
38
'SKIP'
39
'SKIP'
40
'SKIP'
41
'SKIP'
42
'SKIP'
43
'SKIP'
44
'SKIP'
45
'SKIP')
46
47
prepare() {
48
tar -xzf "dirent-${_dirent_commit}.tar.gz" --strip 1 \
49
-C "$pkgname-$pkgver/ext/Dirent/"
50
tar -xzf "ImGuiColorTextEdit-${_ImGuiColorTextEdit_commit}.tar.gz" --strip 1 \
51
-C "$pkgname-$pkgver/ext/ImGuiColorTextEdit/"
52
tar -xzf "glm-${_glm_commit}.tar.gz" --strip 1 \
53
-C "$pkgname-$pkgver/ext/glm/"
54
tar -xzf "imgui-${_imgui_commit}.tar.gz" --strip 1 \
55
-C "$pkgname-$pkgver/ext/imgui/"
56
tar -xzf "link-${_link_commit}.tar.gz" --strip 1 \
57
-C "$pkgname-$pkgver/ext/link/"
58
tar -xzf "miniz-${_miniz_commit}.tar.gz" --strip 1 \
59
-C "$pkgname-$pkgver/ext/miniz/"
60
tar -xzf "SDL_GameControllerDB-${_SDL_GameControllerDB_commit}.tar.gz" --strip 1 \
61
-C "$pkgname-$pkgver/ext/mdqinc/"
62
tar -xzf "stb-${_stb_commit}.tar.gz" --strip 1 \
63
-C "$pkgname-$pkgver/ext/stb/"
64
tar -xzf "asio-${_asio_commit}.tar.gz" --strip 1 \
65
-C "$pkgname-$pkgver/ext/link/modules/asio-standalone/"
66
67
git clone "$srcdir/tinyfiledialogs" \
68
"$pkgname-$pkgver/ext/tfd/"
69
70
sed -i 's|${SNAP}/meta/gui/||' \
71
"$pkgname-$pkgver/snap/gui/$pkgname.desktop"
72
}
73
74
build() {
75
cd $pkgname-$pkgver
76
cmake -GNinja \
77
-Bbuild \
78
-DCMAKE_BUILD_TYPE=Release \
79
-DCMAKE_INSTALL_PREFIX=/usr
80
ninja -C build/
81
}
82
83
package() {
84
cd $pkgname-$pkgver
85
DESTDIR="$pkgdir" ninja -C build/ install
86
87
install -Dm 644 snap/gui/$pkgname.desktop \
88
"$pkgdir"/usr/share/applications/$pkgname.desktop
89
install -Dm 644 snap/gui/$pkgname.svg \
90
"$pkgdir"/usr/share/icons/hicolor/scalable/apps/$pkgname.svg
91
}
92
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |