dijeweled

maintainer ZhangHua · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The non-standard host (gms.yoyogames.com) hosts Igor, a legitimate GameMaker build tool; this is a normal part of the build process for GameMaker projects and not inherently dangerous.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The non-standard host (gms.yoyogames.com) hosts Igor, a legitimate GameMaker build tool; this is a normal part of the build process for GameMaker projects and not inherently dangerous.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:16 source_x86_64=("igor-x86_64.zip::https://gms.yoyogames.com/igor_linux-x64.zip")

PKGBUILD

1 offending line(s) highlighted

      1# See `Access Key` section of https://manual.gamemaker.io/lts/en/Settings/Building_via_Command_Line.htm
    
      2# to create an access key of GameMakerStudio. Then set it as environment variable MAKEPKG_GAMEMAKER_ACCESS_KEY
    
      3# so we can use it to create license plist file, which is required for building game.
    
      4
    
      5pkgname=dijeweled
    
      6pkgver=1.18
    
      7pkgrel=1
    
      8pkgdesc="A fan-made Bejeweled game."
    
      9arch=(x86_64)
    
      10url=https://github.com/LDinos/Dijeweled
    
      11license=(AGPL-3.0-or-later)
    
      12makedepends=(ffmpeg gamemaker-steamruntime-sdk-bin rsync unzip zip)
    
      13source=("$pkgname-$pkgver.tar.gz::https://github.com/LDinos/Dijeweled/archive/refs/tags/v$pkgver.tar.gz")
    
      14# https://github.com/bscotch/igor-setup
    
      15# A bootstrapper used for downloading full runtime.
    
      16source_x86_64=("igor-x86_64.zip::https://gms.yoyogames.com/igor_linux-x64.zip")
    
      17sha256sums=('d10cd913a8b52c3f0f276b14f66e4afb1ed96284259a9d2114e8e99a56dcaa9f')
    
      18sha256sums_x86_64=('cb4ba26356e89b7d95ea3a2d4910ba6d4d795e60147ae350eafadb74390f6895')
    
      19
    
      20_runtime=2024.13.1.242 # nearest to 2024.13.1.193
    
      21_igor=linux/x64/Igor
    
      22
    
      23prepare() {
    
      24    chmod +x "$srcdir/$_igor"
    
      25    echo "Fetching license file..."
    
      26    "$srcdir/$_igor" runtime FetchLicense \
    
      27    	-ak="$MAKEPKG_GAMEMAKER_ACCESS_KEY" \
    
      28    	-of="$srcdir/license.plist"
    
      29    echo "Installing runtime..."
    
      30    "$srcdir/$_igor" runtime Install $_runtime \
    
      31        -lf="$srcdir/license.plist" \
    
      32        -rp="$srcdir/runtimes" \
    
      33        -m="base,linux,linuxYYC"
    
      34    chmod +x "$srcdir/runtimes/runtime-$_runtime/bin/igor/$_igor"
    
      35    # Linux does not ignore upper/lower case
    
      36    local -A patch_paths=([cus_input_box]=CUS_input_box
    
      37                          [obj_stats_m_button_down]=obj_stats_M_button_down
    
      38                          [obj_stats_m_button_up]=obj_stats_M_button_up)
    
      39    local obj
    
      40    for obj in "${!patch_paths[@]}"
    
      41    do
    
      42        if [[ -d "$srcdir/Dijeweled-$pkgver/objects/$obj" ]]
    
      43        then
    
      44            echo "Renaming objects/$obj to objects/${patch_paths[$obj]}..."
    
      45            mv "$srcdir/Dijeweled-$pkgver/objects/$obj" "$srcdir/Dijeweled-$pkgver/objects/${patch_paths[$obj]}"
    
      46            mv "$srcdir/Dijeweled-$pkgver/objects/${patch_paths[$obj]}/$obj.yy" \
    
      47                "$srcdir/Dijeweled-$pkgver/objects/${patch_paths[$obj]}/${patch_paths[$obj]}.yy"
    
      48        fi
    
      49    done
    
      50}
    
      51
    
      52build() {
    
      53    cd "$srcdir/Dijeweled-$pkgver"
    
      54    # https://github.com/bscotch/igor-build
    
      55    "$srcdir/runtimes/runtime-$_runtime/bin/igor/$_igor" linux Package \
    
      56        -lf="$srcdir/license.plist" \
    
      57        -rp="$srcdir/runtimes/runtime-$_runtime" \
    
      58        -project="$srcdir/Dijeweled-$pkgver/bej_temp_remaster.yyp" \
    
      59        -runtime="YYC" \
    
      60        -tf="Dijeweled-$pkgver.zip"
    
      61}
    
      62
    
      63package() {
    
      64    depends=(gcc-libs glibc glu hicolor-icon-theme libcurl-gnutls libglvnd libpulse libx11
    
      65             libxext libxfixes libxrandr libxxf86vm openal openssl-1.0 zlib)
    
      66
    
      67    cd "$srcdir/Dijeweled-$pkgver"
    
      68    mkdir -p "$pkgdir/usr/lib/$pkgname" "$pkgdir/usr/bin"
    
      69    bsdtar -x -C "$pkgdir/usr/lib/$pkgname" -f "Dijeweled-$pkgver.zip" --no-same-owner
    
      70    install -Dm644 options/linux/icons/64.png "$pkgdir/usr/share/icons/hicolor/64x64/apps/$pkgname.png"
    
      71    install -Dm644 "$srcdir/runtimes/runtime-$_runtime/linux/template.desktop" \
    
      72        "$pkgdir/usr/share/applications/$pkgname.desktop"
    
      73    sed -i "s/\${YYDisplayName}/Dijeweled/g;s/\${YYProjectName}/$pkgname/g;" \
    
      74        "$pkgdir/usr/share/applications/$pkgname.desktop"
    
      75    ln -srfv "$pkgdir/usr/lib/$pkgname/bej_temp_remaster" "$pkgdir/usr/bin/$pkgname"
    
      76    
    
      77}
    
      78

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2