flashpoint-launcher-bin

LOW
maintainer hmarcelino 29 votes scanned 2026-09-17 00:27:14.276658
View on AUR
Why flagged

The package downloads a 7z archive from the project's own domain (flashpointarchive.org) which is plausibly the official source; the host is not whitelisted but belongs to the project, and the content is unpacked and installed as data, not executed remotely.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a 7z archive from the project's own domain (flashpointarchive.org) which is plausibly the official source; the host is not whitelisted but belongs to the project, and the content is unpacked and installed as data, not executed remotely.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:40 "https://download.flashpointarchive.org/upload/fp${_launcherver}_lin_${_timestamp}.7z"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: hmarcelino <henry_marcelino at outlook dot com>
2# Contributor: bbaster <bbaster at tutanota dot org>
3
4pkgname=flashpoint-launcher-bin
5pkgver=14.0.3_20251201
6_launcherver=${pkgver%_*}
7_timestamp=${pkgver#*_}
8
9pkgrel=3
10pkgdesc="An archive for games and animations from the web."
11arch=('x86_64')
12url="https://flashpointarchive.org/"
13license=('MIT')
14
15provides=(flashpoint-launcher)
16conflicts=(flashpoint-launcher)
17
18depends=(
19 'pulse-native-provider'
20 'lib32-libxcomposite'
21 'lib32-libpulse'
22 'gtk3'
23 'nss'
24 'php'
25 '7zip'
26 'bash'
27)
28
29optdepends=(
30 'gtk2: native Flash support'
31 'libxt: native Flash support'
32)
33
34options=(
35 '!strip'
36 '!emptydirs'
37)
38
39source=(
40 "https://download.flashpointarchive.org/upload/fp${_launcherver}_lin_${_timestamp}.7z"
41 "flashpoint-launcher.sh"
42 "setup-desktop-entry.patch"
43 "start-flashpoint.patch")
44sha256sums=(
45 'f393a98c5c35e229a744c102b0cb53270b1b4f1b3ebd40d604f98323444a4b1f'
46 'b8865f06dda550effba982517de304a448209fcf4a5e2180929fcf21ccc28508'
47 'e443b979700a8691eb3ba1f7b55cb23d758b7cc13d0fb612c7dcf96a54e8f9d0'
48 'dea20d1a1ac8765adf6f81e8c1110dfe164770a38cd84b500c6dff258f690446')
49
50prepare() {
51 patch -p1 -i setup-desktop-entry.patch -d "${srcdir}"
52 patch -p1 -i start-flashpoint.patch -d "${srcdir}"
53}
54
55package() {
56 echo "Copying data files ..."
57 mkdir -vp "${pkgdir}/opt/Flashpoint/"
58 find "${srcdir}/" -maxdepth 1 -not -name "fp${_launcherver}_lin_main_${_timestamp}.7z" -exec cp -rp {} "${pkgdir}/opt/Flashpoint/" \;
59
60 echo "Creating a launcher script wrapper..."
61 mkdir -vp "${pkgdir}/usr/bin"
62 cp -p ./flashpoint-launcher.sh "${pkgdir}/usr/bin/flashpoint-launcher"
63
64 echo "Creating the desktop file..."
65 chmod +x "./setup-desktop-entry.sh"
66 ENTRY="${srcdir}/flashpoint-archive.desktop" FP_DIR="/opt/Flashpoint/" "./setup-desktop-entry.sh"
67
68 echo "Installing licenses and desktop file..."
69 mkdir -vp "${pkgdir}/usr/share/licenses"
70 cp -rp "${pkgdir}/opt/Flashpoint/Launcher/licenses/" "${pkgdir}/usr/share/licenses/flashpoint"
71 install -Dm644 "${srcdir}/flashpoint-archive.desktop" "${pkgdir}/usr/share/applications/flashpoint-archive.desktop"
72
73 echo "Removing unneeded src folder..."
74 rm -rf "${pkgdir}/opt/Flashpoint/src"
75
76 echo "Removing unneeded Libraries folder..."
77 rm -rf "${pkgdir}/opt/Flashpoint/Libraries"
78}
79

Scan history

Scanned at (UTC)SeverityRules
2026-09-17 00:27:14 Low 2
2026-09-16 00:03:17 Low 2
2026-09-15 00:25:31 Low 2
2026-09-14 00:27:57 Low 2
2026-09-13 00:19:54 Low 2
2026-09-12 00:25:17 Low 2
2026-09-11 00:19:22 Low 2
2026-09-10 00:22:44 Low 2
2026-09-09 00:04:09 Low 2
2026-09-08 00:18:08 Low 2
2026-09-07 00:30:15 Low 2
2026-09-06 00:17:06 Low 2
2026-09-05 00:16:27 Low 2
2026-09-04 00:03:13 Low 2
2026-09-03 00:15:47 Low 2
2026-09-02 00:02:31 Low 2
2026-09-01 00:11:19 Low 2
2026-08-31 00:19:57 Low 2
2026-08-30 00:04:14 Low 2
2026-08-29 00:29:17 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion