1oom-git

maintainer ajacocks · 1 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source uses a git repository from a non-whitelisted host, but it is a fork of the project itself and building from source is standard for AUR; the rest of the sources are local or data files, not executables.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source uses a git repository from a non-whitelisted host, but it is a fork of the project itself and building from source is standard for AUR; the rest of the sources are local or data files, not executables.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:17 source=( 'git+https://git.sourcecraft.dev/fork1oom/1oom.git'

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Alexander Jacocks <alexander@redhat.com>
    
      2# Contributor: Frederic Bezies <fredbezies at gmail dot com>
    
      3# Contributor: Benjamin Hodgetts <ben@xnode.org>
    
      4
    
      5pkgname=1oom-git
    
      6_pkgname=1oom
    
      7pkgver=r669.cf6476e4
    
      8pkgrel=1
    
      9pkgdesc="1oom is a Master of Orion (1993) game engine recreation."
    
      10arch=(x86_64)
    
      11url=https://sourcecraft.dev/fork1oom/1oom
    
      12license=('GPL2')
    
      13depends=(sdl2 sdl2_mixer libsamplerate soundfont-fluid)
    
      14makedepends=(git)
    
      15provides=(1oom)
    
      16conflicts=(1oom)
    
      17source=(  'git+https://git.sourcecraft.dev/fork1oom/1oom.git'
    
      18          'Master_of_Orion_cover.png'
    
      19          '1oom.desktop'
    
      20          '1oom_classic_sdl2.sh' )
    
      21md5sums=('SKIP'
    
      22         '49248e72b7ddc5209cca2c1c61099d85'
    
      23         'ccac2feb67cecfc30b8156edf106b7ca'
    
      24         '41b52627b2d52b477adcbc2a9a627b37')
    
      25
    
      26pkgver() {
    
      27    cd "${srcdir}/${_pkgname}"
    
      28    echo "r$(git rev-list --count HEAD).$(git rev-parse --short HEAD)"
    
      29}
    
      30
    
      31build() {
    
      32  cd ${_pkgname}
    
      33  autoreconf -fi
    
      34  test -d build-native || mkdir build-native
    
      35  cd build-native
    
      36  ../configure --prefix=/usr
    
      37  { test "$(nproc)" -gt 1 && make -j"$(nproc)" ;} || make
    
      38}
    
      39
    
      40package() {
    
      41  cd "${srcdir}/${_pkgname}/build-native"
    
      42  make PREFIX="/usr" DESTDIR="${pkgdir}" install
    
      43
    
      44  # install docs
    
      45  cd "${srcdir}/${_pkgname}/doc"
    
      46  mkdir -p "$pkgdir/usr/share/doc/${_pkgname}"
    
      47  cp *.txt "$pkgdir/usr/share/doc/${_pkgname}/"
    
      48  cd ..
    
      49  cp AUTHORS CONFIGURATION HACKING INSTALL LICENSE NEWS PHILOSOPHY README.md "$pkgdir/usr/share/doc/${_pkgname}/"
    
      50
    
      51  # create storage directory for MOO data
    
      52  mkdir -p "$pkgdir/usr/share/1oom"
    
      53
    
      54  # install launch script
    
      55  mv "$pkgdir/usr/bin/1oom_classic_sdl2" "$pkgdir/usr/bin/1oom_classic_sdl2-bin"
    
      56  install -m 0755 "${srcdir}/1oom_classic_sdl2.sh" "$pkgdir/usr/bin/1oom_classic_sdl2"
    
      57
    
      58  # install icon
    
      59  install -Dm 0644 ${srcdir}/Master_of_Orion_cover.png $pkgdir/usr/share/icons/hicolor/256x256/apps/${_pkgname}.png
    
      60
    
      61  # install desktop file
    
      62  install -Dm644 ${srcdir}/${_pkgname}.desktop $pkgdir/usr/share/applications/${_pkgname}.desktop
    
      63}
    
      64

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2