forge-server-unstable
LOW
maintainer NukeCode87
0 votes
scanned 2026-11-01 00:21:48.120785
Why flagged
The package downloads a LICENSE file and an official Forge installer JAR from maven.minecraftforge.net, which is the project's legitimate repository; building from this source is standard practice and the JAR is part of the official release, not an untrusted executable.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a LICENSE file and an official Forge installer JAR from maven.minecraftforge.net, which is the project's legitimate repository; building from this source is standard practice and the JAR is part of the official release, not an untrusted executable.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:32
"https://maven.minecraftforge.net/net/minecraftforge/forge/${_minecraftver}-${pkgver}/forge-${_minecraftver}-${pkgver}-installer.jar"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Brian Elder <gth747m@gmail.com>
2
3
pkgname=forge-server-unstable
4
pkgdesc="Forge is a free, open-source modding API all of your favourite mods use!"
5
url="https://minecraftforge.net"
6
7
pkgver=66.1.2
8
pkgrel=1
9
_minecraftver=26.3
10
_licensever=26.3
11
_srvpath="/opt"
12
13
arch=("any")
14
license=("custom")
15
depends=("jdk-openjdk")
16
optdepends=("tar: needed in order to create world backups")
17
provides=("forge-server-unstable=66.1.2")
18
backup=("opt/forge-server-unstable/banned-ips.json"
19
"opt/forge-server-unstable/banned-players.json"
20
"opt/forge-server-unstable/config"
21
"opt/forge-server-unstable/eula.txt"
22
"opt/forge-server-unstable/logs"
23
"opt/forge-server-unstable/mods"
24
"opt/forge-server-unstable/ops.json"
25
"opt/forge-server-unstable/server.properties"
26
"opt/forge-server-unstable/usercache.json"
27
"opt/forge-server-unstable/user_jvm_args.txt"
28
"opt/forge-server-unstable/whitelist.json"
29
"opt/forge-server-unstable/world")
30
install="forge-server-unstable.install"
31
source=("https://raw.githubusercontent.com/MinecraftForge/MinecraftForge/${_licensever}/LICENSE.txt"
32
"https://maven.minecraftforge.net/net/minecraftforge/forge/${_minecraftver}-${pkgver}/forge-${_minecraftver}-${pkgver}-installer.jar"
33
"forge-server-unstable.service"
34
"eula.txt")
35
noextract=("forge-${_minecraftver}-${pkgver}-installer.jar")
36
sha512sums=("1f30ec90fae7f3b450affdd73cf3dce738287eecc274fd6d066a575bf75b19d6988b482144a33c80603326485d6b69b0cac866dc5ab25feccfce912d920712fa"
37
"fb89ed6739bd8acda4681f2cdb791b11d37453b43eba93ed9e7399e87c951713abacf871bebb82776d4308e38c3d958639647c9ed3166da3e355a763c2483960"
38
"bfda8a268b2fcb9877fe716d2d3f68b6bc11ba056d8890178c40e51995fa067b2b4f2e1865c0dcc7489dd037f22fe95ae8b5d50b9cb7000ce4854c48072c042d"
39
"68205ffc60327c67a5ebe778598c3350d64b48aad9dacf52fcde435a535a074ba2056db30dff1b18e3c8e38510acd6ececa298b13cd4c4203636560fa4cf70cb")
40
41
prepare() {
42
mkdir -p forge-server-unstable || exit
43
}
44
45
build() {
46
java -jar "./forge-${_minecraftver}-${pkgver}-installer.jar" --installServer ./forge-server-unstable
47
}
48
49
package() {
50
install -d "${pkgdir}/${_srvpath}/${pkgname}"
51
install -Dm444 "LICENSE.txt" "${pkgdir}/${_srvpath}/${pkgname}"
52
install -Dm644 "eula.txt" "${pkgdir}/${_srvpath}/${pkgname}"
53
cp -r "./${pkgname}" "${pkgdir}/${_srvpath}"
54
ln -s "forge-${_minecraftver}-${pkgver}-shim.jar" "${pkgdir}/${_srvpath}/${pkgname}/forge-server-unstable.jar"
55
install -Dm644 "${srcdir}/forge-server-unstable.service" "${pkgdir}/usr/lib/systemd/system/forge-server-unstable.service"
56
}
57
Changes since previous scan
--- PKGBUILD @ 2026-10-30 00:29+++ PKGBUILD @ 2026-11-01 00:21@@ -4,7 +4,7 @@ pkgdesc="Forge is a free, open-source modding API all of your favourite mods use!" url="https://minecraftforge.net" -pkgver=66.1.0+pkgver=66.1.2 pkgrel=1 _minecraftver=26.3 _licensever=26.3@@ -14,7 +14,7 @@ license=("custom") depends=("jdk-openjdk") optdepends=("tar: needed in order to create world backups")-provides=("forge-server-unstable=66.1.0")+provides=("forge-server-unstable=66.1.2") backup=("opt/forge-server-unstable/banned-ips.json" "opt/forge-server-unstable/banned-players.json" "opt/forge-server-unstable/config"@@ -34,7 +34,7 @@ "eula.txt") noextract=("forge-${_minecraftver}-${pkgver}-installer.jar") sha512sums=("1f30ec90fae7f3b450affdd73cf3dce738287eecc274fd6d066a575bf75b19d6988b482144a33c80603326485d6b69b0cac866dc5ab25feccfce912d920712fa"- "2945cf8565480c2b061054ec5560e9f72281499e86bbf8e6e9f4ad85754eb1aa6b4d7f5e204f946078147a804fffaf72d9ff08b72be3e278b722058b4a567b4a"+ "fb89ed6739bd8acda4681f2cdb791b11d37453b43eba93ed9e7399e87c951713abacf871bebb82776d4308e38c3d958639647c9ed3166da3e355a763c2483960" "bfda8a268b2fcb9877fe716d2d3f68b6bc11ba056d8890178c40e51995fa067b2b4f2e1865c0dcc7489dd037f22fe95ae8b5d50b9cb7000ce4854c48072c042d" "68205ffc60327c67a5ebe778598c3350d64b48aad9dacf52fcde435a535a074ba2056db30dff1b18e3c8e38510acd6ececa298b13cd4c4203636560fa4cf70cb") Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 01:55:02 | Medium | 1 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 01:33:44 | Medium | 1 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 01:16:24 | Medium | 1 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 03:14:05 | Medium | 1 |