bennugd-modules

LOW

maintainer jose1711 2 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The source uses SVN from a project-associated SourceForge repository, building from version-controlled code; non-whitelisted host is plausibly official, and no untrusted executables are downloaded or executed.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source uses SVN from a project-associated SourceForge repository, building from version-controlled code; non-whitelisted host is plausibly official, and no untrusted executables are downloaded or executed.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:12 source=("core::svn+https://svn.code.sf.net/p/bennugd/code/core#revision=${pkgver}"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Jozef Riha <jose1711 at gmail dot com>
    
      2
    
      3pkgname=bennugd-modules
    
      4pkgver=356
    
      5pkgrel=2
    
      6pkgdesc="a programming language to create games (Fenix successor) - modules"
    
      7arch=('x86_64')
    
      8url="http://sourceforge.net/projects/bennugd/"
    
      9license=('Zlib')
    
      10depends=('bennugd-core' 'lib32-glibc' 'lib32-libpng' 'lib32-libx11' 'lib32-sdl12-compat' 'lib32-sdl_mixer')
    
      11makedepends=('subversion' 'gcc-multilib')
    
      12source=("core::svn+https://svn.code.sf.net/p/bennugd/code/core#revision=${pkgver}"
    
      13        "modules::svn+https://svn.code.sf.net/p/bennugd/code/modules#revision=${pkgver}")
    
      14md5sums=('SKIP' 'SKIP')
    
      15
    
      16prepare() {
    
      17    cd $srcdir/modules
    
      18    chmod +x ./configure
    
      19    sed -i -e 's/info_ptr->trans_values/info_ptr->trans_color/' -e 's/info_ptr->trans[^_]/info_ptr->trans_alpha/' mod_map/file_png.c
    
      20    sed -i -e '/fmul/s%^%// %' -e '/fdiv/s%^%// %' ../core/include/fmath.h
    
      21}
    
      22
    
      23build() {
    
      24    cd $srcdir/modules
    
      25    CFLAGS+=" -std=gnu17 -Wno-error=incompatible-pointer-types -Wno-error=implicit-function-declaration -Wno-error=int-conversion"
    
      26    ./configure --prefix=/usr --build=i686-pc-linux-gnu
    
      27    make
    
      28}
    
      29
    
      30package() {
    
      31    make -C $srcdir/modules DESTDIR=${pkgdir} install
    
      32    install -Dm644 $srcdir/modules/COPYING "${pkgdir}/usr/share/licenses/${pkgname}/COPYING"
    
      33}
    
      34

Changes since previous scan

--- PKGBUILD @ 2026-06-18 16:11
+++ PKGBUILD @ 2026-10-17 00:21
@@ -2,32 +2,33 @@
 
 pkgname=bennugd-modules
 pkgver=356
-pkgrel=1
+pkgrel=2
 pkgdesc="a programming language to create games (Fenix successor) - modules"
-arch=('i686' 'x86_64')
+arch=('x86_64')
 url="http://sourceforge.net/projects/bennugd/"
-license=('zlib')
-depends=('zlib' 'bennugd-core' 'sdl_mixer' 'libpng')
-if [[ "$CARCH" = "x86_64" ]]; then
-    depends=('lib32-zlib' 'bennugd-core' 'lib32-sdl_mixer' 'lib32-libpng')
-fi
-source=("https://sourceforge.net/code-snapshots/svn/b/be/bennugd/code/bennugd-code-r${pkgver}.zip")
-md5sums=('SKIP')
+license=('Zlib')
+depends=('bennugd-core' 'lib32-glibc' 'lib32-libpng' 'lib32-libx11' 'lib32-sdl12-compat' 'lib32-sdl_mixer')
+makedepends=('subversion' 'gcc-multilib')
+source=("core::svn+https://svn.code.sf.net/p/bennugd/code/core#revision=${pkgver}"
+        "modules::svn+https://svn.code.sf.net/p/bennugd/code/modules#revision=${pkgver}")
+md5sums=('SKIP' 'SKIP')
 
 prepare() {
-    cd $srcdir/bennugd-code-r${pkgver}/modules
+    cd $srcdir/modules
     chmod +x ./configure
     sed -i -e 's/info_ptr->trans_values/info_ptr->trans_color/' -e 's/info_ptr->trans[^_]/info_ptr->trans_alpha/' mod_map/file_png.c
     sed -i -e '/fmul/s%^%// %' -e '/fdiv/s%^%// %' ../core/include/fmath.h
 }
 
 build() {
-    cd $srcdir/bennugd-code-r${pkgver}/modules
+    cd $srcdir/modules
+    CFLAGS+=" -std=gnu17 -Wno-error=incompatible-pointer-types -Wno-error=implicit-function-declaration -Wno-error=int-conversion"
     ./configure --prefix=/usr --build=i686-pc-linux-gnu
     make
 }
 
 package() {
-    make -C $srcdir/bennugd-code-r${pkgver}/modules DESTDIR=${pkgdir} install
+    make -C $srcdir/modules DESTDIR=${pkgdir} install
+    install -Dm644 $srcdir/modules/COPYING "${pkgdir}/usr/share/licenses/${pkgname}/COPYING"
 }
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 17:14:20	Medium	1
2026-06-18 16:11:54	Clean	0