eden-git

LOW

maintainer username227 15 votes scanned 2026-10-02 00:00:32.890515

View on AUR

Why flagged

The source is a git repository from a project-owned host (git.eden-emu.dev) used to build the emulator from source; this is normal AUR packaging behavior despite the non-whitelisted domain, and no untrusted prebuilt binaries are involved.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a git repository from a project-owned host (git.eden-emu.dev) used to build the emulator from source; this is normal AUR packaging behavior despite the non-whitelisted domain, and no untrusted prebuilt binaries are involved.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:26 source=("git+https://git.eden-emu.dev/eden-emu/eden.git")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: gfrank227 [at] gmail [dot] com
    
      2# Maintainer: HurricanePootis <hurricanepootis@protonmail.com>
    
      3# Contributor: crueter <crueter at crueter dot x y z>
    
      4# Contributor: rcf <ryan.farley@gmx.com>
    
      5_pkgname=eden
    
      6pkgname=$_pkgname-git
    
      7epoch=1
    
      8pkgver=0.2.0.r273.g858f9e5
    
      9pkgrel=1
    
      10pkgdesc="Nintendo Switch emulator forked from yuzu."
    
      11arch=('x86_64' 'aarch64')
    
      12url=https://eden-emulator.github.io/
    
      13license=('GPL-3.0-or-later')
    
      14provides=('eden')
    
      15conflicts=('eden' 'eden-beta' 'eden-bin' 'eden-preview-bin')
    
      16depends=('libusb' 'libva' 'qt6-webengine' 'brotli' 'qt6-charts' 'hicolor-icon-theme'
    
      17	'qt6-base' 'sdl3' 'quazip-qt6' 'qt6-multimedia' 'fmt' 'boost-libs' 'opus' 'libdrm'
    
      18	'enet' 'cubeb' 'game-devices-udev' 'zlib' 'openssl' 'libx11' 'libgcc'
    
      19	'libstdc++' 'lz4' 'glibc' 'zstd' 'cpp-jwt'
    
      20)
    
      21makedepends=('git' 'cmake' 'catch2' 'boost' 'spirv-headers' 'vulkan-headers'
    
      22	     'vulkan-utility-libraries' 'nlohmann-json' 'ninja' 'gamemode'
    
      23	     'renderdoc' 'qt6-tools' 'nasm' 'opencl-headers' 'doxygen')
    
      24optdepends=('gamemode: Gamemoded support')
    
      25options=(!debug)
    
      26source=("git+https://git.eden-emu.dev/eden-emu/eden.git")
    
      27sha256sums=('SKIP')
    
      28pkgver() {
    
      29	cd "$_pkgname"
    
      30	git describe --long --tags --abbrev=7 | sed 's/^v//;s/-\(rc[0-9]*\)/\1/;s/\([^-]*-g\)/r\1/;s/-/./g;s/.git//'
    
      31}
    
      32build() {
    
      33	cd "$srcdir"
    
      34	cmake -B build -S $_pkgname -GNinja \
    
      35		-DCMAKE_INSTALL_PREFIX=/usr \
    
      36		-DCMAKE_BUILD_TYPE=None \
    
      37		-DUSE_DISCORD_PRESENCE=ON \
    
      38		-DYUZU_USE_BUNDLED_FFMPEG=OFF \
    
      39		-DDiscordRPC_FORCE_BUNDLED=ON \
    
      40		-DYUZU_USE_BUNDLED_QT=OFF \
    
      41		-Dxbyak_FORCE_BUNDLED=ON \
    
      42		-DENABLE_QT_TRANSLATION=ON \
    
      43		-DYUZU_USE_QT_MULTIMEDIA=ON \
    
      44		-DYUZU_USE_QT_WEB_ENGINE=ON \
    
      45		-DTITLE_BAR_FORMAT_RUNNING="eden | ${pkgver} {}" \
    
      46		-DTITLE_BAR_FORMAT_IDLE="eden ${pkgver} {}" \
    
      47		-DYUZU_TESTS=OFF \
    
      48		-DDYNARMIC_TESTS=OFF \
    
      49		-DBUILD_TESTING=OFF \
    
      50		-Wno-dev
    
      51	cmake --build build
    
      52}
    
      53package() {
    
      54	cd "$srcdir"
    
      55	DESTDIR="$pkgdir/" cmake --install build
    
      56	cd "$srcdir/$_pkgname/LICENSES"
    
      57	for file in *.txt;
    
      58	do
    
      59		install -Dm644 $file "$pkgdir/usr/share/licenses/$pkgname/$file"
    
      60	done
    
      61}
    
      62
    
      63
    
      64

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-02 00:00:32	Low	2
2026-10-01 00:02:06	Low	2
2026-09-30 00:20:07	Low	2
2026-09-29 00:07:46	Low	2
2026-09-28 00:28:32	Low	2
2026-09-27 00:07:07	Low	2
2026-09-26 00:12:15	Low	2
2026-09-25 00:03:36	Low	2
2026-09-24 00:24:14	Low	2
2026-09-23 00:28:13	Low	2
2026-09-22 00:15:14	Low	2
2026-09-21 00:26:32	Low	2
2026-09-20 00:25:31	Low	2
2026-09-19 00:25:36	Low	2
2026-09-18 00:17:11	Low	2
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2