defold-bin

LOW

maintainer mizuk1 5 votes scanned 2026-11-01 00:21:48.120785

View on AUR

Why flagged

The package downloads a prebuilt Defold editor binary from d.defold.com, which is the official distribution domain for Defold, and the download is pinned to a specific commit hash and verified via sha256sum; despite the static analyzer flagging the host as non-standard, it is a legitimate and expected source for this software, and the checksum ensures integrity.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt Defold editor binary from d.defold.com, which is the official distribution domain for Defold, and the download is pinned to a specific commit hash and verified via sha256sum; despite the static analyzer flagging the host as non-standard, it is a legitimate and expected source for this software, and the checksum ensures integrity.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:16 source=("${pkgname}-${pkgver}.tar.gz::https://d.defold.com/archive/${_channel}/${_sha1}/${_channel}/editor2/Defold-x86_64-linux.tar.gz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Asakura Mizu <asakuramizu111@gmail.com>
    
      2_sha1=d295ed4edff2e49072719835713e625f409849f1
    
      3_channel=stable
    
      4pkgname=defold-bin
    
      5pkgver=1.14.0.d295ed4
    
      6pkgrel=1
    
      7pkgdesc='Defold is a completely free to use game engine for development of desktop, mobile and web games.'
    
      8arch=('x86_64')
    
      9url='https://defold.com/'
    
      10license=('LicenseRef-Defold')
    
      11depends=('glu')
    
      12provides=('defold')
    
      13conflicts=('defold')
    
      14replaces=('defold')
    
      15options=('!strip')
    
      16source=("${pkgname}-${pkgver}.tar.gz::https://d.defold.com/archive/${_channel}/${_sha1}/${_channel}/editor2/Defold-x86_64-linux.tar.gz"
    
      17        "${pkgname}-${pkgver}-LICENSE.txt::https://github.com/defold/defold/raw/${_sha1}/LICENSE.txt"
    
      18        'Defold.desktop')
    
      19sha256sums=('9fdb9d22fe6d970a27a705b5cf20a7e29db18521c12190be82c28fd6cf1579eb'
    
      20            'be6e9921ba01445d200ba3dc09b5cab149a58d57a76ca98376b52af87d817a7a'
    
      21            '915892954b9156c9cd8e8b85b959de897e240d438289192d973804c4cf04f9bf')
    
      22
    
      23package() {
    
      24    bsdtar -xf Defold/packages/defold-${_sha1}.jar --strip-components 2 icons/document.iconset
    
      25
    
      26    install -Dm644 "${pkgname}-${pkgver}-LICENSE.txt" "$pkgdir/usr/share/licenses/$pkgname/LICENSE.txt"
    
      27    install -Dm644 Defold.desktop -t "$pkgdir/usr/share/applications"
    
      28    install -Dm644 icon_16x16.png "$pkgdir/usr/share/icons/hicolor/16x16/apps/defold.png"
    
      29    install -Dm644 icon_16x16@2x.png "$pkgdir/usr/share/icons/hicolor/32x32/apps/defold.png"
    
      30    install -Dm644 icon_32x32@2x.png "$pkgdir/usr/share/icons/hicolor/64x64/apps/defold.png"
    
      31    install -Dm644 icon_128x128.png "$pkgdir/usr/share/icons/hicolor/128x128/apps/defold.png"
    
      32    install -Dm644 icon_256x256.png "$pkgdir/usr/share/icons/hicolor/256x256/apps/defold.png"
    
      33    install -Dm644 icon_256x256@2x.png "$pkgdir/usr/share/icons/hicolor/512x512/apps/defold.png"
    
      34
    
      35    mkdir -p "$pkgdir/opt"
    
      36    cp -r Defold "$pkgdir/opt"
    
      37}
    
      38

Changes since previous scan

--- PKGBUILD @ 2026-10-19 00:03
+++ PKGBUILD @ 2026-11-01 00:21
@@ -1,34 +1,29 @@
 # Maintainer: Asakura Mizu <asakuramizu111@gmail.com>
-_sha1=a81dbb0478e8b73931dc2d671563204f6ac0ef82
+_sha1=d295ed4edff2e49072719835713e625f409849f1
 _channel=stable
 pkgname=defold-bin
-pkgver=1.14.0.a81dbb0
-pkgrel=2
-epoch=
+pkgver=1.14.0.d295ed4
+pkgrel=1
 pkgdesc='Defold is a completely free to use game engine for development of desktop, mobile and web games.'
 arch=('x86_64')
 url='https://defold.com/'
-license=('custom')
-groups=()
+license=('LicenseRef-Defold')
 depends=('glu')
-optdepends=()
 provides=('defold')
 conflicts=('defold')
 replaces=('defold')
 options=('!strip')
-source=("${pkgname}-${pkgver}-${pkgrel}.tar.gz::https://d.defold.com/archive/${_channel}/${_sha1}/${_channel}/editor2/Defold-x86_64-linux.tar.gz"
-        'https://github.com/defold/defold/raw/refs/heads/dev/LICENSE.txt'
+source=("${pkgname}-${pkgver}.tar.gz::https://d.defold.com/archive/${_channel}/${_sha1}/${_channel}/editor2/Defold-x86_64-linux.tar.gz"
+        "${pkgname}-${pkgver}-LICENSE.txt::https://github.com/defold/defold/raw/${_sha1}/LICENSE.txt"
         'Defold.desktop')
-sha256sums=('cf2d8bcb3cc816c5ba4b966e579828b6c3cfbf97fed1657f71408744f9838a64'
+sha256sums=('9fdb9d22fe6d970a27a705b5cf20a7e29db18521c12190be82c28fd6cf1579eb'
             'be6e9921ba01445d200ba3dc09b5cab149a58d57a76ca98376b52af87d817a7a'
-            '5c92dc2b1cf4acc81f26b6848c3bb3ee812158e80a15fb1e7f5585362acb20f2')
+            '915892954b9156c9cd8e8b85b959de897e240d438289192d973804c4cf04f9bf')
 
 package() {
-    cd "$srcdir"
-
     bsdtar -xf Defold/packages/defold-${_sha1}.jar --strip-components 2 icons/document.iconset
 
-    install -Dm644 LICENSE.txt -t "$pkgdir/usr/share/licenses/$pkgname"
+    install -Dm644 "${pkgname}-${pkgver}-LICENSE.txt" "$pkgdir/usr/share/licenses/$pkgname/LICENSE.txt"
     install -Dm644 Defold.desktop -t "$pkgdir/usr/share/applications"
     install -Dm644 icon_16x16.png "$pkgdir/usr/share/icons/hicolor/16x16/apps/defold.png"
     install -Dm644 icon_16x16@2x.png "$pkgdir/usr/share/icons/hicolor/32x32/apps/defold.png"

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-01 00:21:48	Low	2
2026-10-31 00:07:41	Low	2
2026-10-30 00:29:30	Low	2
2026-10-29 00:13:55	Low	2
2026-10-28 00:06:54	Low	2
2026-10-27 00:23:28	Low	2
2026-10-26 00:12:40	Low	2
2026-10-25 00:20:48	Low	2
2026-10-24 00:14:55	Low	2
2026-10-23 00:02:19	Low	2
2026-10-22 00:13:10	Low	2
2026-10-21 00:12:50	Low	2
2026-10-20 00:10:31	Low	2
2026-10-19 19:26:12	Medium	1
2026-10-19 00:03:55	Low	2
2026-10-18 00:06:55	Low	2
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2