checkersland

LOW

maintainer jose1711 1 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The package downloads a JAR file from the project's official domain, which is normal for AUR packages; the host is not whitelisted but is plausibly legitimate, and the JAR is part of building the project's own source, with no evidence of malicious intent or remote code execution.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a JAR file from the project's official domain, which is normal for AUR packages; the host is not whitelisted but is plausibly legitimate, and the JAR is part of building the project's own source, with no evidence of malicious intent or remote code execution.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:12 source=(http://checkersland.com/download/checkersland.jar

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Jose Riha <jose1711 gmail com>
    
      2
    
      3pkgname=checkersland
    
      4pkgver=20211112
    
      5pkgrel=1
    
      6pkgdesc='Сheckers program for playing with computer or people via the Internet'
    
      7arch=(x86_64)
    
      8url="http://checkersland.com/"
    
      9license=('freeware')
    
      10depends=(java-runtime)
    
      11makedepends=(gendesk)
    
      12source=(http://checkersland.com/download/checkersland.jar
    
      13        checkersland
    
      14        checkersland.png)
    
      15install=checkersland.install
    
      16md5sums=('2c4b5d9519e5ec4910c40b08a58376ba'
    
      17         '2c37881e0f34ed66bb4bf862116787c6'
    
      18         '904461219a50a4fe6631dfe55731c2d9')
    
      19
    
      20prepare() {
    
      21  gendesk -f -n --pkgname "${pkgname}" --pkgdesc "${pkgdesc}" --exec "checkersland" --categories "Game;BoardGame"
    
      22}
    
      23
    
      24package() {
    
      25  install -Dm644 "${srcdir}/checkersland.jar" "${pkgdir}/usr/share/games/checkersland/checkersland.jar"
    
      26  install -Dm755 "${srcdir}/checkersland" "${pkgdir}/usr/bin/checkersland"
    
      27  install -Dm644 "${srcdir}/checkersland.desktop" "$pkgdir/usr/share/applications/checkersland.desktop"
    
      28  install -Dm644 "${srcdir}/checkersland.png" "$pkgdir/usr/share/pixmaps/checkersland.png"
    
      29  chgrp -R games "${pkgdir}/usr/share/games/checkersland"
    
      30  chmod 775 "${pkgdir}/usr/share/games/checkersland"
    
      31}
    
      32

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 00:29:17	Low	2