daikatana-bin

LOW
maintainer orphaned 1 votes scanned 2026-09-17 00:27:14.276658
View on AUR
Why flagged

The package downloads game data files and a binary from project-associated hosts; worst case is data tampering, not code execution, as payloads are non-executable assets.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads game data files and a binary from project-associated hosts; worst case is data tampering, not code execution, as payloads are non-executable assets.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:20 "http://dk.toastednet.org/DK13/pak5.zip"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: John-Michael Mulesa <jmulesa at gmail dot com>
2# Contributor: kyndair <kyndair at gmail dot com>
3
4pkgname=daikatana-bin
5_pkgname=daikatana
6pkgver=1.3
7_pkgver="1.0_(22142)"
8pkgrel=1
9pkgdesc="Daikatana 1.3 binary release"
10arch=('x86_64')
11url="https://bitbucket.org/daikatana13/daikatana"
12license=('custom')
13makedepends=('innoextract' 'icoutils')
14optdepends=('daikatana-data-gog: game data files from GOG'
15 'daikatana-data-steam: game data files from Steam')
16provides=('daikatana')
17source=("daikatana.desktop"
18"https://bitbucket.org/daikatana13/daikatana/downloads/Daikatana-Linux-2021-12-20-x64.tar.bz2"
19"https://bitbucket.org/daikatana13/daikatana/downloads/pak6-2021-12-19.zip"
20"http://dk.toastednet.org/DK13/pak5.zip"
21"http://dk.toastednet.org/Maps/pak9.zip"
22"http://dk.toastednet.org/Music/Daikatana_OGG_music.zip")
23sha256sums=('0fe4bc3bcbc7e30065aefb563112f6e30dc0775a84a613c4495a89edfa8f2995'
24 'e2ef9991dc5755c578587dd02c10724133046a544d38a6dba23cb28ce8bac02e'
25 '81ff9e2b8e5cf176ba6c3b714d2aa4c0c2abb41a1ee7fdfe623eb2e1d5798a53'
26 '39d1cab035340724f990372e51ee332323a9b9c6aead5c46f988559aa6a631cb'
27 '065d5063096bd5267cac1e7a64edd85a690d71952aa469abed3deae4f10e8398'
28 '5a2c6a7fe376c66edfaa28f5e91ffdf353fc85d54be358fba07009f336662b26')
29
30package() {
31 mkdir -p "${pkgdir}/opt/${_pkgname}"
32 mkdir -p "${pkgdir}/usr/bin"
33
34 # install data files
35 cp -r ${srcdir}/Daikatana-Linux-2021-12-20-x64/* ${pkgdir}/opt/${_pkgname}/
36 cp ${srcdir}/*.pak ${pkgdir}/opt/${_pkgname}/data/
37 cp ${srcdir}/*.ogg ${pkgdir}/opt/${_pkgname}/data/music/
38
39 # Install Desktop File
40 install -D -m 644 "${srcdir}/${_pkgname}.desktop" \
41 "${pkgdir}/usr/share/applications/${_pkgname}.desktop"
42
43 # Link Executables in /usr/bin
44 ln -sf "/opt/${_pkgname}/${_pkgname}" "${pkgdir}/usr/bin/${_pkgname}"
45 ln -sf "/opt/${_pkgname}/dkded" "${pkgdir}/usr/bin/dkded"
46}
47

Scan history

Scanned at (UTC)SeverityRules
2026-09-17 00:27:14 Low 2
2026-09-16 00:03:17 Low 2
2026-09-15 00:25:31 Low 2
2026-09-14 00:27:57 Low 2
2026-09-13 00:19:54 Low 2
2026-09-12 00:25:17 Low 2
2026-09-11 00:19:22 Low 2
2026-09-10 00:22:44 Low 2
2026-09-09 00:04:09 Low 2
2026-09-08 00:18:08 Low 2
2026-09-07 00:30:15 Low 2
2026-09-06 00:17:06 Low 2
2026-09-05 00:16:27 Low 2
2026-09-04 00:03:13 Low 2
2026-09-03 00:15:47 Low 2
2026-09-02 00:02:31 Low 2
2026-09-01 00:11:19 Low 2
2026-08-31 00:19:57 Low 2
2026-08-30 00:04:14 Low 2
2026-08-29 00:29:17 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion