fortune-mod-discworld
maintainer keenerd
· 43 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The package downloads a tarball from a non-whitelisted but plausibly project-owned host; however, it contains only data files (quotes and license) for a fortune cookie mod, not executable code, so the worst-case impact of a swapped source is limited to content tampering.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a tarball from a non-whitelisted but plausibly project-owned host; however, it contains only data files (quotes and license) for a fortune cookie mod, not executable code, so the worst-case impact of a swapped source is limited to content tampering.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:14
source=(http://www.splitbrain.org/_media/projects/fortunes/fortune-discworld.tgz)
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Kyle Keen <keenerd@archlinux.org>
2
# Contributor: Damir Perisa <damir.perisa@bluewin.ch>
3
# Contributor: dale <dale@archlinux.org>
4
# Contributor: bender02 at gmx dot com
5
6
pkgname=fortune-mod-discworld
7
pkgver=0
8
pkgrel=3
9
pkgdesc='Fortune cookies from the "Discworld" novels by Terry Pratchett.'
10
url="http://www.splitbrain.org/projects/fortunes/discworld"
11
arch=('any')
12
license=('copyright')
13
depends=('fortune-mod')
14
source=(http://www.splitbrain.org/_media/projects/fortunes/fortune-discworld.tgz)
15
md5sums=('4e00763163ae6ca76f7f23e435edbe08')
16
17
package() {
18
cd fortune-discworld
19
install -Dm644 discworld "$pkgdir/usr/share/fortune/discworld"
20
install -Dm644 discworld.dat "$pkgdir/usr/share/fortune/discworld.dat"
21
install -Dm644 README "$pkgdir/usr/share/licenses/$pkgname/README"
22
}
23
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |
| 2026-07-15 00:09:25 | LOW | 2 |