xstudio-bin

LOW

maintainer Tanghe 0 votes scanned 2026-08-29 01:37:41.981247

View on AUR

Why flagged

Package installs a prebuilt binary from a GitHub release by the maintainer; while the host is not a major vendor, it is the project's own repository, and the binary is not executed at build time but installed as-is, with no obfuscated scripts or remote code execution, making the risk low.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): Package installs a prebuilt binary from a GitHub release by the maintainer; while the host is not a major vendor, it is the project's own repository, and the binary is not executed at build time but installed as-is, with no obfuscated scripts or remote code execution, making the risk low.

PKGBUILD

      1# Maintainer: Nic Tanghe <nic.tanghe@gmail.com>
    
      2
    
      3pkgname=xstudio-bin
    
      4pkgver=1.3.0
    
      5pkgrel=1
    
      6pkgdesc='Professional media playback, review, annotation, and comparison application (prebuilt binary)'
    
      7arch=('x86_64')
    
      8url='https://github.com/NicTanghe/FXiT_xStudio'
    
      9license=('Apache-2.0')
    
      10depends=(
    
      11    'alsa-lib'
    
      12    'bash'
    
      13    'gcc-libs'
    
      14    'glibc'
    
      15    'glu'
    
      16    'hicolor-icon-theme'
    
      17    'libglvnd'
    
      18    'libpulse'
    
      19    'libx11'
    
      20    'libxext'
    
      21    'qt6-base'
    
      22    'qt6-declarative'
    
      23    'qt6-svg'
    
      24    'qt6-webengine'
    
      25    'zlib-ng'
    
      26)
    
      27makedepends=('patchelf')
    
      28provides=("xstudio=${pkgver}")
    
      29conflicts=('xstudio')
    
      30options=('!debug' '!strip')
    
      31source=(
    
      32    "xstudio-${pkgver}-${pkgrel}-${CARCH}.tar.zst::https://github.com/NicTanghe/FXiT_xStudio/releases/download/xstudio-bin-v${pkgver}-${pkgrel}/xstudio-${pkgver}-${pkgrel}-${CARCH}.tar.zst"
    
      33    'xstudio.desktop'
    
      34)
    
      35sha256sums=(
    
      36    'a4ac07a6190c1b781daafc37bcc4a9bdad2243dc2983cd0b3d9fe9aa7652f981'
    
      37    '6fddbb74c03628d95b24db3cf14f2140ce10a6924ad2cc2cacde3310410239b8'
    
      38)
    
      39
    
      40package() {
    
      41    install -d "${pkgdir}/usr/lib/xstudio"
    
      42    cp -a --no-preserve=ownership \
    
      43        "${srcdir}/xstudio-${pkgver}/." "${pkgdir}/usr/lib/xstudio/"
    
      44
    
      45    install -d "${pkgdir}/usr/bin"
    
      46    ln -s '../lib/xstudio/bin/xstudio' "${pkgdir}/usr/bin/xstudio"
    
      47
    
      48    patchelf --remove-rpath \
    
      49        "${pkgdir}/usr/lib/xstudio/lib/python/xstudio/core/__pybind_xstudio.cpython-311-x86_64-linux-gnu.so"
    
      50    rm -rf -- "${pkgdir}/usr/lib/xstudio/share/xstudio/docs/.doctrees"
    
      51    find "${pkgdir}/usr/lib/xstudio" -type f \( -name '*.pyc' -o -name '*.pyo' \) -delete
    
      52    find "${pkgdir}/usr/lib/xstudio" -depth -type d -name '__pycache__' -empty -delete
    
      53
    
      54    install -Dm644 "${srcdir}/xstudio.desktop" \
    
      55        "${pkgdir}/usr/share/applications/xstudio.desktop"
    
      56    install -Dm644 \
    
      57        "${srcdir}/xstudio-${pkgver}/share/xstudio/docs/_images/xstudio_logo_256_v1.svg" \
    
      58        "${pkgdir}/usr/share/icons/hicolor/scalable/apps/xstudio.svg"
    
      59
    
      60    install -Dm644 "${srcdir}/xstudio-${pkgver}/LICENSE" \
    
      61        "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      62    install -Dm644 "${srcdir}/xstudio-${pkgver}/NOTICE.TXT" \
    
      63        "${pkgdir}/usr/share/licenses/${pkgname}/NOTICE.TXT"
    
      64    cp -a --no-preserve=ownership \
    
      65        "${srcdir}/xstudio-${pkgver}/share/licenses/xstudio/third-party" \
    
      66        "${pkgdir}/usr/share/licenses/${pkgname}/"
    
      67}
    
      68

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-29 01:37:41	Low	2