bennugd-core

LOW

maintainer jose1711 2 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The source uses a SourceForge-hosted SVN repository, which is a standard open-source forge; building from a project's own repository, even on a non-whitelisted host, is normal AUR packaging and not inherently dangerous.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source uses a SourceForge-hosted SVN repository, which is a standard open-source forge; building from a project's own repository, even on a non-whitelisted host, is normal AUR packaging and not inherently dangerous.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:12 source=("bennugd-core::svn+https://svn.code.sf.net/p/bennugd/code/core#revision=${pkgver}")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Jozef Riha <jose1711 at gmail dot com>
    
      2
    
      3pkgname=bennugd-core
    
      4pkgver=356
    
      5pkgrel=2
    
      6pkgdesc="a programming language to create games (Fenix successor) - core"
    
      7arch=('x86_64')
    
      8url="http://sourceforge.net/projects/bennugd/"
    
      9license=('Zlib')
    
      10depends=('lib32-glibc' 'lib32-openssl' 'lib32-zlib')
    
      11makedepends=('subversion' 'gcc-multilib')
    
      12source=("bennugd-core::svn+https://svn.code.sf.net/p/bennugd/code/core#revision=${pkgver}")
    
      13md5sums=('SKIP')
    
      14
    
      15build() {
    
      16    cd $srcdir/bennugd-core
    
      17    chmod +x ./configure
    
      18    ./configure --prefix=/usr --build=i686-pc-linux-gnu
    
      19    make
    
      20}
    
      21
    
      22package() {
    
      23    make -C $srcdir/bennugd-core DESTDIR=${pkgdir} install
    
      24    install -Dm644 $srcdir/bennugd-core/COPYING "${pkgdir}/usr/share/licenses/${pkgname}/COPYING"
    
      25}
    
      26

Changes since previous scan

--- PKGBUILD @ 2026-06-18 16:11
+++ PKGBUILD @ 2026-10-17 00:21
@@ -2,28 +2,25 @@
 
 pkgname=bennugd-core
 pkgver=356
-pkgrel=1
+pkgrel=2
 pkgdesc="a programming language to create games (Fenix successor) - core"
-arch=('i686' 'x86_64')
+arch=('x86_64')
 url="http://sourceforge.net/projects/bennugd/"
-license=('zlib')
-depends=('openssl' 'gcc-libs')
-if [[ "$CARCH" = "x86_64" ]]; then
-    depends=('lib32-openssl' 'lib32-gcc-libs')
-fi
-source=("https://sourceforge.net/code-snapshots/svn/b/be/bennugd/code/bennugd-code-r${pkgver}.zip" x86_64-configure.patch)
-md5sums=('SKIP' 'bee8ea76634b5e0dbaf29c9b6d3b147f')
+license=('Zlib')
+depends=('lib32-glibc' 'lib32-openssl' 'lib32-zlib')
+makedepends=('subversion' 'gcc-multilib')
+source=("bennugd-core::svn+https://svn.code.sf.net/p/bennugd/code/core#revision=${pkgver}")
+md5sums=('SKIP')
 
 build() {
-    cd $srcdir/bennugd-code-r${pkgver}/core
+    cd $srcdir/bennugd-core
     chmod +x ./configure
     ./configure --prefix=/usr --build=i686-pc-linux-gnu
-    #patch -p0 -i $srcdir/x86_64-configure.patch
-    #find . -name Makefile -print0 | xargs -0 sed -i 's/--as-needed//'
     make
 }
 
 package() {
-    make -C $srcdir/bennugd-code-r${pkgver}/core DESTDIR=${pkgdir} install
+    make -C $srcdir/bennugd-core DESTDIR=${pkgdir} install
+    install -Dm644 $srcdir/bennugd-core/COPYING "${pkgdir}/usr/share/licenses/${pkgname}/COPYING"
 }
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 00:18:51	Low	2
2026-10-11 23:11:19	Medium	1
2026-06-18 16:11:54	Clean	0