faugus-launcher-bin

maintainer Felitendo · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package installs a prebuilt Debian binary from the project's official GitHub releases, which is unpacked and adjusted for Arch; while the source is not verifiable from upstream tarballs and uses a non-whitelisted host (GitHub), it is the official release channel for the project and the payload consists of Python scripts and data files that are not obfuscated or maliciously executed.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt Debian binary from the project's official GitHub releases, which is unpacked and adjusted for Arch; while the source is not verifiable from upstream tarballs and uses a non-whitelisted host (GitHub), it is the official release channel for the project and the payload consists of Python scripts and data files that are not obfuscated or maliciously executed.

PKGBUILD

      1# Maintainer: Felitendo
    
      2# This PKGBUILD is updated automatically:
    
      3# https://github.com/Felitendo/PKGBUILDS
    
      4
    
      5pkgname=faugus-launcher-bin
    
      6pkgver=2.0.5
    
      7pkgrel=1
    
      8pkgdesc="Simple and lightweight app for running Windows games using UMU-Launcher (upstream binary)"
    
      9arch=('any')
    
      10url="https://github.com/Faugus/faugus-launcher"
    
      11license=('MIT')
    
      12depends=('gtk4' 'libadwaita' 'libmanette' 'icoextract' 'python'
    
      13         'python-gobject' 'python-requests' 'python-pillow' 'python-vdf'
    
      14         'python-psutil' 'python-dbus' 'umu-launcher')
    
      15optdepends=('mangohud: performance overlay'
    
      16            'gamemode: feral gamemode integration')
    
      17provides=('faugus-launcher')
    
      18conflicts=('faugus-launcher')
    
      19# The Debian revision in the asset name does not follow from pkgver, so the
    
      20# exact name is tracked here and refreshed automatically.
    
      21_asset="faugus-launcher_2.0.5-1_all.deb"
    
      22source=("${pkgname}-${pkgver}.deb::${url}/releases/download/${pkgver}/${_asset}")
    
      23noextract=("${pkgname}-${pkgver}.deb")
    
      24sha256sums=('8aae12bc924f5798136ad3081c1adf39bb7e82584e0fbf5d461d92dd3a2f72fd')
    
      25
    
      26package() {
    
      27  local _deb="$srcdir/deb"
    
      28
    
      29  install -d "$_deb"
    
      30  bsdtar -xOf "$srcdir/${pkgname}-${pkgver}.deb" 'data.tar.*' \
    
      31    | bsdtar -xpf - -C "$_deb" ./usr
    
      32
    
      33  # Debian puts the modules in dist-packages, which is not on Arch's
    
      34  # sys.path. A fixed private directory also keeps the package working
    
      35  # across Python minor bumps, since it is only rebuilt for new releases.
    
      36  install -d "$pkgdir/usr/lib/faugus-launcher"
    
      37  cp -a "$_deb/usr/lib/python3/dist-packages/faugus" "$pkgdir/usr/lib/faugus-launcher/"
    
      38  # .pyc compiled for Debian's Python, useless here
    
      39  find "$pkgdir/usr/lib/faugus-launcher" -type d -name __pycache__ -exec rm -rf {} +
    
      40
    
      41  cp -a "$_deb/usr/share" "$pkgdir/usr/"
    
      42  # generated by pacman hooks; shipping them would cause file conflicts
    
      43  rm -f "$pkgdir/usr/share/applications/mimeinfo.cache" \
    
      44        "$pkgdir/usr/share/icons/hicolor/icon-theme.cache"
    
      45
    
      46  # upstream's wrapper relies on Debian's default sys.path, ours points at
    
      47  # the directory above; the rest matches upstream verbatim
    
      48  install -d "$pkgdir/usr/bin"
    
      49  cat > "$pkgdir/usr/bin/faugus-launcher" << 'EOF'
    
      50#!/bin/sh
    
      51
    
      52export PYTHONPATH="/usr/lib/faugus-launcher${PYTHONPATH:+:$PYTHONPATH}"
    
      53export GTK_IM_MODULE="${GTK_IM_MODULE:-simple}"
    
      54
    
      55case "$1" in
    
      56	--shortcut) exec /usr/bin/python3 -m faugus.shortcut "$2";;
    
      57	--game)     exec /usr/bin/python3 -m faugus.runner --game "$2";;
    
      58	--run)      msg="$2"; shift 2; exec /usr/bin/python3 -m faugus.runner "$msg" "$@";;
    
      59	*)          exec /usr/bin/python3 -m faugus.launcher "$@";;
    
      60esac
    
      61EOF
    
      62  chmod 755 "$pkgdir/usr/bin/faugus-launcher"
    
      63
    
      64  mv "$pkgdir/usr/share/licenses/faugus-launcher" \
    
      65     "$pkgdir/usr/share/licenses/$pkgname"
    
      66}
    
      67

Changes since previous scan

--- PKGBUILD @ 2026-08-01 00:11
+++ PKGBUILD @ 2026-08-03 00:08
@@ -3,7 +3,7 @@
 # https://github.com/Felitendo/PKGBUILDS
 
 pkgname=faugus-launcher-bin
-pkgver=2.0.4
+pkgver=2.0.5
 pkgrel=1
 pkgdesc="Simple and lightweight app for running Windows games using UMU-Launcher (upstream binary)"
 arch=('any')
@@ -18,10 +18,10 @@
 conflicts=('faugus-launcher')
 # The Debian revision in the asset name does not follow from pkgver, so the
 # exact name is tracked here and refreshed automatically.
-_asset="faugus-launcher_2.0.4-1_all.deb"
+_asset="faugus-launcher_2.0.5-1_all.deb"
 source=("${pkgname}-${pkgver}.deb::${url}/releases/download/${pkgver}/${_asset}")
 noextract=("${pkgname}-${pkgver}.deb")
-sha256sums=('958f288906a251d76beaae7921c3c01293ad86b9c35850b37fcb187ae1990ecb')
+sha256sums=('8aae12bc924f5798136ad3081c1adf39bb7e82584e0fbf5d461d92dd3a2f72fd')
 
 package() {
   local _deb="$srcdir/deb"

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 09:20:18	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 13:14:23	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 17:35:03	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 09:27:42	LOW	2
2026-07-24 07:27:58	LOW	2