epic-games-launcher-bin

LOW

maintainer minpeter 4 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package downloads an official AppImage from Epic Games' own content distribution domain, which is plausibly part of their official infrastructure, and extracts it to install the application; the source is not from a random or personal host, and the checksum is provided, making this a standard repackaging with low risk.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads an official AppImage from Epic Games' own content distribution domain, which is plausibly part of their official infrastructure, and extracts it to install the application; the source is not from a random or personal host, and the checksum is provided, making this a standard repackaging with low risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:35 source=("${_appimage}::https://content-download-egs.distro.on.epicgames.com/Builds/EGLv2/${pkgver}%2B${_commit}/Linux/EpicGamesLauncher-x86_64.AppImage")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: minpeter <minpeter@users.noreply.github.com>
    
      2
    
      3pkgname=epic-games-launcher-bin
    
      4pkgver=0.96.1
    
      5_commit=ge3e236d
    
      6pkgrel=1
    
      7pkgdesc="Official Epic Games Store launcher (Preview)"
    
      8arch=('x86_64')
    
      9url="https://launcher.epicgames.com/"
    
      10license=('LicenseRef-EpicGamesLauncher')
    
      11depends=(
    
      12  'cairo'
    
      13  'dbus'
    
      14  'gcc-libs'
    
      15  'gdk-pixbuf2'
    
      16  'glib2'
    
      17  'glibc'
    
      18  'gtk3'
    
      19  'hicolor-icon-theme'
    
      20  'libayatana-appindicator'
    
      21  'libsoup3'
    
      22  'libx11'
    
      23  'webkit2gtk-4.1'
    
      24)
    
      25optdepends=(
    
      26  'libsecret: store authentication tokens in the system keyring'
    
      27  'xdg-utils: open external links in the default browser'
    
      28)
    
      29makedepends=('7zip')
    
      30provides=("epic-games-launcher=${pkgver}")
    
      31conflicts=('epic-games-launcher')
    
      32options=('!debug' '!strip')
    
      33
    
      34_appimage="EpicGamesLauncher-${pkgver}-${_commit}-x86_64.AppImage"
    
      35source=("${_appimage}::https://content-download-egs.distro.on.epicgames.com/Builds/EGLv2/${pkgver}%2B${_commit}/Linux/EpicGamesLauncher-x86_64.AppImage")
    
      36noextract=("${_appimage}")
    
      37sha256sums=('841567e93d9128c9d24cbb8b1e4d26e15c375ca0c73e968551a2c1af320b06bd')
    
      38
    
      39prepare() {
    
      40  rm -rf "${srcdir}/squashfs-root"
    
      41  7z x "${srcdir}/${_appimage}" -o"${srcdir}/squashfs-root" >/dev/null
    
      42}
    
      43
    
      44package() {
    
      45  cd "${srcdir}/squashfs-root"
    
      46
    
      47  install -Dm755 usr/bin/EpicGamesLauncher \
    
      48    "${pkgdir}/usr/lib/epic-games-launcher/bin/EpicGamesLauncher"
    
      49  install -Dm755 usr/lib/libEOSSDK-Linux-Shipping.so \
    
      50    "${pkgdir}/usr/lib/epic-games-launcher/lib/libEOSSDK-Linux-Shipping.so"
    
      51  install -Dm644 usr/lib/epic-games-launcher/resources/ThirdPartyNotices.txt \
    
      52    "${pkgdir}/usr/lib/epic-games-launcher/resources/ThirdPartyNotices.txt"
    
      53  ln -s .. "${pkgdir}/usr/lib/epic-games-launcher/lib/epic-games-launcher"
    
      54
    
      55  install -Dm755 /dev/stdin "${pkgdir}/usr/bin/EpicGamesLauncher" <<'EOF'
    
      56#!/bin/sh
    
      57export EGL_DISABLE_SELF_UPDATE="${EGL_DISABLE_SELF_UPDATE:-1}"
    
      58exec /usr/lib/epic-games-launcher/bin/EpicGamesLauncher "$@"
    
      59EOF
    
      60  ln -s EpicGamesLauncher "${pkgdir}/usr/bin/epic-games-launcher"
    
      61
    
      62  install -Dm644 usr/share/applications/epic-games-launcher.desktop \
    
      63    "${pkgdir}/usr/share/applications/epic-games-launcher.desktop"
    
      64
    
      65  install -Dm644 usr/share/icons/hicolor/32x32/apps/EpicGamesLauncher.png \
    
      66    "${pkgdir}/usr/share/icons/hicolor/32x32/apps/EpicGamesLauncher.png"
    
      67  install -Dm644 usr/share/icons/hicolor/128x128/apps/EpicGamesLauncher.png \
    
      68    "${pkgdir}/usr/share/icons/hicolor/128x128/apps/EpicGamesLauncher.png"
    
      69  install -Dm644 epic-games-launcher.png \
    
      70    "${pkgdir}/usr/share/icons/hicolor/256x256/apps/EpicGamesLauncher.png"
    
      71  install -Dm644 usr/share/icons/hicolor/256x256@2/apps/EpicGamesLauncher.png \
    
      72    "${pkgdir}/usr/share/icons/hicolor/256x256@2/apps/EpicGamesLauncher.png"
    
      73
    
      74  install -Dm644 usr/lib/epic-games-launcher/resources/ThirdPartyNotices.txt \
    
      75    "${pkgdir}/usr/share/licenses/${pkgname}/ThirdPartyNotices.txt"
    
      76}
    
      77

Changes since previous scan

--- PKGBUILD @ 2026-10-16 00:12
+++ PKGBUILD @ 2026-10-17 00:21
@@ -1,8 +1,8 @@
 # Maintainer: minpeter <minpeter@users.noreply.github.com>
 
 pkgname=epic-games-launcher-bin
-pkgver=0.95.2
-_commit=gfa9ad49
+pkgver=0.96.1
+_commit=ge3e236d
 pkgrel=1
 pkgdesc="Official Epic Games Store launcher (Preview)"
 arch=('x86_64')
@@ -17,6 +17,7 @@
   'glibc'
   'gtk3'
   'hicolor-icon-theme'
+  'libayatana-appindicator'
   'libsoup3'
   'libx11'
   'webkit2gtk-4.1'
@@ -33,7 +34,7 @@
 _appimage="EpicGamesLauncher-${pkgver}-${_commit}-x86_64.AppImage"
 source=("${_appimage}::https://content-download-egs.distro.on.epicgames.com/Builds/EGLv2/${pkgver}%2B${_commit}/Linux/EpicGamesLauncher-x86_64.AppImage")
 noextract=("${_appimage}")
-sha256sums=('7066159ec987afcdc27069f070b456bdb9a805bd5f02114aa7ad86e5559cbfd5')
+sha256sums=('841567e93d9128c9d24cbb8b1e4d26e15c375ca0c73e968551a2c1af320b06bd')
 
 prepare() {
   rm -rf "${srcdir}/squashfs-root"

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 09:15:55	Medium	1
2026-10-16 00:12:47	Low	3
2026-10-15 00:28:05	Low	3
2026-10-14 17:22:42	Low	3
2026-10-14 17:20:19	Medium	2