2d-mmo-launcher-bin

maintainer enikaique21 · 0 votes · scanned 2026-08-03 00:08:14.047287

MEDIUM

Why flagged The package installs a prebuilt .deb binary from a GitHub release without source compilation, creating a supply-chain risk if the artifact is swapped, despite the project being the maintainer's own.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

MEDIUM AI review of an ambiguous pattern llm_review

The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it MEDIUM (confidence 90%): The package installs a prebuilt .deb binary from a GitHub release without source compilation, creating a supply-chain risk if the artifact is swapped, despite the project being the maintainer's own.

PKGBUILD

      1# Maintainer: Kaique Lopes Bazilio
    
      2
    
      3pkgname=2d-mmo-launcher-bin
    
      4_pkgname=2d-mmo-launcher
    
      5pkgver=0.2.0
    
      6pkgrel=1
    
      7
    
      8pkgdesc="Launcher extensível para instalar e executar MMORPGs 2D no Linux"
    
      9arch=("x86_64")
    
      10url="https://github.com/nkaique21/2D-MMO-Launcher"
    
      11license=("MIT")
    
      12
    
      13depends=(
    
      14  "gtk3"
    
      15  "webkit2gtk-4.1"
    
      16  "hicolor-icon-theme"
    
      17)
    
      18
    
      19provides=("2d-mmo-launcher")
    
      20conflicts=("2d-mmo-launcher")
    
      21
    
      22options=("!strip")
    
      23
    
      24source=(
    
      25  "${_pkgname}-${pkgver}.deb::https://github.com/nkaique21/2D-MMO-Launcher/releases/download/v${pkgver}/2D.MMO.Launcher_${pkgver}_amd64.deb"
    
      26  "LICENSE"
    
      27)
    
      28
    
      29sha256sums=(
    
      30  "d4cc562eb0bccc552d8a20a14ef08babf4b911edfdc773ac7d0aa719415bcb5d"
    
      31  "64e587754d31b70490c7db78c3e934b3ad12b3829241741a139414c9c3f54705"
    
      32)
    
      33
    
      34prepare() {
    
      35  bsdtar -xf "${_pkgname}-${pkgver}.deb"
    
      36  bsdtar -xf data.tar.gz
    
      37}
    
      38
    
      39package() {
    
      40  cp -a usr "${pkgdir}/"
    
      41
    
      42  install -Dm644 \
    
      43    "${srcdir}/LICENSE" \
    
      44    "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      45}
    
      46

Changes since previous scan

--- PKGBUILD @ 2026-07-24 00:02
+++ PKGBUILD @ 2026-08-03 00:08
@@ -2,7 +2,7 @@
 
 pkgname=2d-mmo-launcher-bin
 _pkgname=2d-mmo-launcher
-pkgver=0.1.0
+pkgver=0.2.0
 pkgrel=1
 
 pkgdesc="Launcher extensível para instalar e executar MMORPGs 2D no Linux"
@@ -22,29 +22,22 @@
 options=("!strip")
 
 source=(
-  "${_pkgname}-${pkgver}::https://github.com/nkaique21/2D-MMO-Launcher/releases/download/v${pkgver}/two-d-mmo-launcher"
-  "2d-mmo-launcher.desktop"
-  "2d-mmo-launcher.png"
+  "${_pkgname}-${pkgver}.deb::https://github.com/nkaique21/2D-MMO-Launcher/releases/download/v${pkgver}/2D.MMO.Launcher_${pkgver}_amd64.deb"
   "LICENSE"
 )
 
-sha256sums=('641bb8bbadc2199f8ad6a7dbccddcf7b256b70f7de11ee0291b59b747ef7aeea'
-            '7b40626bc6356798b7d2a5db8553511c7a1f36a25dca424a1bb5b0aa761b5ede'
-            '867049a7388ad6aef9dd8beb4e8634c67997d5da45607cfe9200e94dbefb2320'
-            '64e587754d31b70490c7db78c3e934b3ad12b3829241741a139414c9c3f54705')
+sha256sums=(
+  "d4cc562eb0bccc552d8a20a14ef08babf4b911edfdc773ac7d0aa719415bcb5d"
+  "64e587754d31b70490c7db78c3e934b3ad12b3829241741a139414c9c3f54705"
+)
+
+prepare() {
+  bsdtar -xf "${_pkgname}-${pkgver}.deb"
+  bsdtar -xf data.tar.gz
+}
 
 package() {
-  install -Dm755 \
-    "${srcdir}/${_pkgname}-${pkgver}" \
-    "${pkgdir}/usr/bin/${_pkgname}"
-
-  install -Dm644 \
-    "${srcdir}/2d-mmo-launcher.desktop" \
-    "${pkgdir}/usr/share/applications/2d-mmo-launcher.desktop"
-
-  install -Dm644 \
-    "${srcdir}/2d-mmo-launcher.png" \
-    "${pkgdir}/usr/share/icons/hicolor/512x512/apps/2d-mmo-launcher.png"
+  cp -a usr "${pkgdir}/"
 
   install -Dm644 \
     "${srcdir}/LICENSE" \

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	MEDIUM	2
2026-08-02 00:16:08	MEDIUM	2
2026-08-01 00:11:18	MEDIUM	2
2026-07-31 00:14:10	MEDIUM	2
2026-07-30 00:17:23	MEDIUM	2
2026-07-29 00:25:53	MEDIUM	2
2026-07-28 00:07:28	MEDIUM	2
2026-07-27 00:24:32	MEDIUM	2
2026-07-26 00:07:32	MEDIUM	2
2026-07-25 07:29:36	MEDIUM	2
2026-07-24 00:02:28	CLEAN	2
2026-07-23 11:23:42	LOW	1