circuslinux
LOW
maintainer pekkarr
2 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The source is a tarball from a plausible project-related host (tuxpaint.org), building the project's own source code; the non-whitelisted host is not inherently dangerous as it hosts legitimate open-source software sources.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from a plausible project-related host (tuxpaint.org), building the project's own source code; the non-whitelisted host is not inherently dangerous as it hosts legitimate open-source software sources.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:15
source=("ftp://ftp.tuxpaint.org/unix/x/circus-linux/src/circuslinux-$pkgver.tar.gz"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Pekka Ristola <pekkarr [at] protonmail [dot] com>
2
# Contributor: Michael Straube <straubem@gmx.de>
3
# Contributor: Anton Bazhenov <anton.bazhenov at gmail>
4
# Contributor: Tom Newsom <Jeepster@gmx.co.uk>
5
# Contributor: bangoskank <its.hip@gmail.com>
6
7
pkgname=circuslinux
8
pkgver=1.0.3
9
pkgrel=6
10
pkgdesc='Clone of the Atari 2600 game Circus Atari'
11
arch=('x86_64')
12
url='http://www.newbreedsoftware.com/circus-linux/'
13
license=('GPL')
14
depends=('sdl' 'sdl_image' 'sdl_mixer' 'hicolor-icon-theme')
15
source=("ftp://ftp.tuxpaint.org/unix/x/circus-linux/src/circuslinux-$pkgver.tar.gz"
16
"$pkgname.desktop")
17
sha512sums=('292bcaad39342ad69862f1add36b11505ca5f2601637a8db6fad438c5a4b32d7801bc7e6c08b903b0fb8bf68dcb3ec8d968fb913cde65941b9b9ac64b5a5266f'
18
'fa87b7d0e771d4ff04623e9962fe978dbf49e2af8457daeb39ee95d2706b414a2d6a26c8cf018d260b2c1f347a71afdfb4e42a71eb74fd6e2231b938996c5b16')
19
20
prepare() {
21
cd $pkgname-$pkgver
22
# Fix build
23
sed -i -e 's/CFLAGS = @CFLAGS@/AM_CFLAGS =/' \
24
-e 's/circuslinux_CFLAGS = CFLAGS/circuslinux_CFLAGS = $(AM_CFLAGS)/' \
25
-e '/^docdir =/d' Makefile.am
26
sed -i 's/ $(pkgdatadir)/ $(DESTDIR)$(pkgdatadir)/' data/Makefile.am
27
# Fix version information
28
sed -i "s/AM_INIT_AUTOMAKE(.*)/AM_INIT_AUTOMAKE($pkgname,$pkgver)/" configure.in
29
}
30
31
build() {
32
cd $pkgname-$pkgver
33
AUTOMAKE="automake --foreign" autoreconf -fi
34
./configure --prefix=/usr --enable-joystick
35
make
36
}
37
38
package() {
39
cd $pkgname-$pkgver
40
make DESTDIR="$pkgdir/" install
41
42
install -d "$pkgdir"/usr/share/icons/hicolor/32x32/apps
43
ln -s /usr/share/$pkgname/data/images/$pkgname-icon.xpm \
44
"$pkgdir"/usr/share/icons/hicolor/32x32/apps/$pkgname.xpm
45
46
install -Dm 644 -t "$pkgdir"/usr/share/applications/ "$srcdir/$pkgname.desktop"
47
}
48
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |