factorio-headless

LOW

maintainer mxmeinhold 22 votes scanned 2026-10-24 00:14:55.209548

View on AUR

Why flagged

The source is a prebuilt tarball from the official factorio.com domain, which is the project's legitimate release infrastructure, making it a normal and expected AUR packaging pattern despite the non-whitelisted host.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a prebuilt tarball from the official factorio.com domain, which is the project's legitimate release infrastructure, making it a normal and expected AUR packaging pattern despite the non-whitelisted host.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:27 factorio_headless_x64_${pkgver}.tar.xz::https://www.factorio.com/get-download/${pkgver}/headless/linux64

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Max Meinhold <mxmeinhold@gmail.com>
    
      2# Contributor: mickael9 <mickael9@gmail.com>
    
      3# Contributor: Sebastien Duthil <duthils@free.fr>
    
      4# Inspiration for service and config files: https://github.com/Bisa/factorio-init
    
      5
    
      6pkgname=factorio-headless
    
      7pkgver=2.1.23
    
      8pkgrel=1
    
      9pkgdesc="A 2D game about building and maintaining factories - Server version (stable branch)"
    
      10arch=('x86_64')
    
      11url="http://www.factorio.com/"
    
      12license=('LicenseRef-Custom-Commercial')
    
      13depends=('glibc')
    
      14conflicts=('factorio' 'factorio-demo' 'factorio-experimental' 'factorio-headless-experimental')
    
      15install=factorio-headless.install
    
      16backup=(etc/conf.d/factorio
    
      17        etc/factorio/server-settings.json
    
      18        etc/factorio/map-gen-settings.json
    
      19        etc/factorio/map-settings.json
    
      20)
    
      21
    
      22source=(LICENSE
    
      23        factorio-headless.service
    
      24        factorio-headless.conf
    
      25        factorio-headless.sysusers
    
      26        factorio-headless.tmpfiles
    
      27        factorio_headless_x64_${pkgver}.tar.xz::https://www.factorio.com/get-download/${pkgver}/headless/linux64
    
      28)
    
      29
    
      30sha256sums=('e15ac4bbd0ccf3956a0a281535045e0ffb163bf10f0e3fde6b71642921bf6310'
    
      31            '72bbef31fced163e5993eff0e73a836a557165775eb77e0d69b24fe5ec4690a7'
    
      32            '40931abfd15db6027c02471c20f86923e74471a9eb91453638c42e0f968027f5'
    
      33            '87dae15d1bcfb4683faea9c66498bd916bd27f8aa0dc724c4e21076dcf17da64'
    
      34            '76d9de57f9a7b14266e09f77f176a8430508d8778ebfec3c5c5125a54806bb90'
    
      35            '4633250f7747676279fb210a1717ba34caed6b9890c951fb3e469eefe43c46b9')
    
      36
    
      37# no modifications needed, the executable looks for:
    
      38# - data in /usr/share/factorio
    
      39# - config in ~/.factorio
    
      40
    
      41package() {
    
      42  install -Dm755 "${srcdir}/factorio/bin/x64/factorio" "${pkgdir}/usr/bin/factorio"
    
      43  install -d "${pkgdir}/usr/share/factorio"
    
      44  cp -r "${srcdir}/factorio/data"/* "${pkgdir}/usr/share/factorio"
    
      45  install -Dm644 "${srcdir}/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      46
    
      47  install -Dm644 "${srcdir}/factorio-headless.sysusers" "${pkgdir}/usr/lib/sysusers.d/factorio.conf"
    
      48  install -Dm644 "${srcdir}/factorio-headless.tmpfiles" "${pkgdir}/usr/lib/tmpfiles.d/factorio.conf"
    
      49  install -Dm644 "${srcdir}/factorio-headless.conf" "${pkgdir}/etc/conf.d/factorio"
    
      50  install -Dm644 "${srcdir}/factorio-headless.service" "${pkgdir}/usr/lib/systemd/system/factorio.service"
    
      51  # server-settings.json can contain sensitive data so we need to make it only readable by the factorio user
    
      52  install -Dm600 "${srcdir}/factorio/data/server-settings.example.json" "${pkgdir}/etc/factorio/server-settings.json"
    
      53  install -Dm644 "${srcdir}/factorio/data/map-gen-settings.example.json" "${pkgdir}/etc/factorio/map-gen-settings.json"
    
      54  install -Dm644 "${srcdir}/factorio/data/map-settings.example.json" "${pkgdir}/etc/factorio/map-settings.json"
    
      55
    
      56  # public isn't really a good default especially with the default name/description
    
      57  sed -i 's/^    "public": true/    "public": false/' "${pkgdir}/etc/factorio/server-settings.json"
    
      58}
    
      59

Changes since previous scan

--- PKGBUILD @ 2026-06-22 20:14
+++ PKGBUILD @ 2026-10-24 00:14
@@ -4,7 +4,7 @@
 # Inspiration for service and config files: https://github.com/Bisa/factorio-init
 
 pkgname=factorio-headless
-pkgver=2.0.77
+pkgver=2.1.23
 pkgrel=1
 pkgdesc="A 2D game about building and maintaining factories - Server version (stable branch)"
 arch=('x86_64')
@@ -32,7 +32,7 @@
             '40931abfd15db6027c02471c20f86923e74471a9eb91453638c42e0f968027f5'
             '87dae15d1bcfb4683faea9c66498bd916bd27f8aa0dc724c4e21076dcf17da64'
             '76d9de57f9a7b14266e09f77f176a8430508d8778ebfec3c5c5125a54806bb90'
-            'c4efc11529f74d37c96933e291e0db73fd9f5aa4738913d9301b24680b3e947f')
+            '4633250f7747676279fb210a1717ba34caed6b9890c951fb3e469eefe43c46b9')
 
 # no modifications needed, the executable looks for:
 # - data in /usr/share/factorio

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-24 00:14:55	Low	2
2026-10-23 19:38:15	Medium	1
2026-06-22 20:14:17	Clean	2
2026-06-19 23:51:18	Clean	2
2026-06-19 22:34:54	Medium	1