daikatana-bin
LOW
maintainer orphaned
1 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads game data files and a binary from project-associated hosts; worst case is data tampering, not code execution, as payloads are non-executable assets.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads game data files and a binary from project-associated hosts; worst case is data tampering, not code execution, as payloads are non-executable assets.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:20
"http://dk.toastednet.org/DK13/pak5.zip"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: John-Michael Mulesa <jmulesa at gmail dot com>
2
# Contributor: kyndair <kyndair at gmail dot com>
3
4
pkgname=daikatana-bin
5
_pkgname=daikatana
6
pkgver=1.3
7
_pkgver="1.0_(22142)"
8
pkgrel=1
9
pkgdesc="Daikatana 1.3 binary release"
10
arch=('x86_64')
11
url="https://bitbucket.org/daikatana13/daikatana"
12
license=('custom')
13
makedepends=('innoextract' 'icoutils')
14
optdepends=('daikatana-data-gog: game data files from GOG'
15
'daikatana-data-steam: game data files from Steam')
16
provides=('daikatana')
17
source=("daikatana.desktop"
18
"https://bitbucket.org/daikatana13/daikatana/downloads/Daikatana-Linux-2021-12-20-x64.tar.bz2"
19
"https://bitbucket.org/daikatana13/daikatana/downloads/pak6-2021-12-19.zip"
20
"http://dk.toastednet.org/DK13/pak5.zip"
21
"http://dk.toastednet.org/Maps/pak9.zip"
22
"http://dk.toastednet.org/Music/Daikatana_OGG_music.zip")
23
sha256sums=('0fe4bc3bcbc7e30065aefb563112f6e30dc0775a84a613c4495a89edfa8f2995'
24
'e2ef9991dc5755c578587dd02c10724133046a544d38a6dba23cb28ce8bac02e'
25
'81ff9e2b8e5cf176ba6c3b714d2aa4c0c2abb41a1ee7fdfe623eb2e1d5798a53'
26
'39d1cab035340724f990372e51ee332323a9b9c6aead5c46f988559aa6a631cb'
27
'065d5063096bd5267cac1e7a64edd85a690d71952aa469abed3deae4f10e8398'
28
'5a2c6a7fe376c66edfaa28f5e91ffdf353fc85d54be358fba07009f336662b26')
29
30
package() {
31
mkdir -p "${pkgdir}/opt/${_pkgname}"
32
mkdir -p "${pkgdir}/usr/bin"
33
34
# install data files
35
cp -r ${srcdir}/Daikatana-Linux-2021-12-20-x64/* ${pkgdir}/opt/${_pkgname}/
36
cp ${srcdir}/*.pak ${pkgdir}/opt/${_pkgname}/data/
37
cp ${srcdir}/*.ogg ${pkgdir}/opt/${_pkgname}/data/music/
38
39
# Install Desktop File
40
install -D -m 644 "${srcdir}/${_pkgname}.desktop" \
41
"${pkgdir}/usr/share/applications/${_pkgname}.desktop"
42
43
# Link Executables in /usr/bin
44
ln -sf "/opt/${_pkgname}/${_pkgname}" "${pkgdir}/usr/bin/${_pkgname}"
45
ln -sf "/opt/${_pkgname}/dkded" "${pkgdir}/usr/bin/dkded"
46
}
47
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |