circuslinux
maintainer pekkarr
· 2 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The source is a tarball from a plausible project-related host (tuxpaint.org), building the project's own source code; the non-whitelisted host is not inherently dangerous as it hosts legitimate open-source software sources.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from a plausible project-related host (tuxpaint.org), building the project's own source code; the non-whitelisted host is not inherently dangerous as it hosts legitimate open-source software sources.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:15
source=("ftp://ftp.tuxpaint.org/unix/x/circus-linux/src/circuslinux-$pkgver.tar.gz"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Pekka Ristola <pekkarr [at] protonmail [dot] com>
2
# Contributor: Michael Straube <straubem@gmx.de>
3
# Contributor: Anton Bazhenov <anton.bazhenov at gmail>
4
# Contributor: Tom Newsom <Jeepster@gmx.co.uk>
5
# Contributor: bangoskank <its.hip@gmail.com>
6
7
pkgname=circuslinux
8
pkgver=1.0.3
9
pkgrel=6
10
pkgdesc='Clone of the Atari 2600 game Circus Atari'
11
arch=('x86_64')
12
url='http://www.newbreedsoftware.com/circus-linux/'
13
license=('GPL')
14
depends=('sdl' 'sdl_image' 'sdl_mixer' 'hicolor-icon-theme')
15
source=("ftp://ftp.tuxpaint.org/unix/x/circus-linux/src/circuslinux-$pkgver.tar.gz"
16
"$pkgname.desktop")
17
sha512sums=('292bcaad39342ad69862f1add36b11505ca5f2601637a8db6fad438c5a4b32d7801bc7e6c08b903b0fb8bf68dcb3ec8d968fb913cde65941b9b9ac64b5a5266f'
18
'fa87b7d0e771d4ff04623e9962fe978dbf49e2af8457daeb39ee95d2706b414a2d6a26c8cf018d260b2c1f347a71afdfb4e42a71eb74fd6e2231b938996c5b16')
19
20
prepare() {
21
cd $pkgname-$pkgver
22
# Fix build
23
sed -i -e 's/CFLAGS = @CFLAGS@/AM_CFLAGS =/' \
24
-e 's/circuslinux_CFLAGS = CFLAGS/circuslinux_CFLAGS = $(AM_CFLAGS)/' \
25
-e '/^docdir =/d' Makefile.am
26
sed -i 's/ $(pkgdatadir)/ $(DESTDIR)$(pkgdatadir)/' data/Makefile.am
27
# Fix version information
28
sed -i "s/AM_INIT_AUTOMAKE(.*)/AM_INIT_AUTOMAKE($pkgname,$pkgver)/" configure.in
29
}
30
31
build() {
32
cd $pkgname-$pkgver
33
AUTOMAKE="automake --foreign" autoreconf -fi
34
./configure --prefix=/usr --enable-joystick
35
make
36
}
37
38
package() {
39
cd $pkgname-$pkgver
40
make DESTDIR="$pkgdir/" install
41
42
install -d "$pkgdir"/usr/share/icons/hicolor/32x32/apps
43
ln -s /usr/share/$pkgname/data/images/$pkgname-icon.xpm \
44
"$pkgdir"/usr/share/icons/hicolor/32x32/apps/$pkgname.xpm
45
46
install -Dm 644 -t "$pkgdir"/usr/share/applications/ "$srcdir/$pkgname.desktop"
47
}
48
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |
| 2026-07-15 00:09:25 | LOW | 2 |