fusepak

MEDIUM

maintainer jose1711 2 votes scanned 2026-10-18 15:22:20.091682

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:13 source=($pkgname-$pkgver.tar.gz::https://web.archive.org/web/20150803202234id_/http://iweb.dl.sourceforge.net/project/$pkgname/$pkgname/$pkgver/$pkgname-$pkgver.tar.gz)

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Jose Riha <jose1711 gmail com>
    
      2# Contributor: Samantha Baldwin <fuhsaz 'plus' aur 'at' cryptic 'dot' li>
    
      3
    
      4pkgname=fusepak
    
      5pkgver=0.5
    
      6pkgrel=3
    
      7pkgdesc="Mount PACK and WAD files via FUSE."
    
      8arch=('x86_64' 'i686')
    
      9url="http://fusepak.sourceforge.net/"
    
      10license=('GPLv2')
    
      11depends=('fuse')
    
      12# the project is gone from SourceForge; Wayback Machine copy of the original tarball (same md5)
    
      13source=($pkgname-$pkgver.tar.gz::https://web.archive.org/web/20150803202234id_/http://iweb.dl.sourceforge.net/project/$pkgname/$pkgname/$pkgver/$pkgname-$pkgver.tar.gz)
    
      14md5sums=('7be66f6f9bdbef20d821784ad476039b')
    
      15sha256sums=('103d826811ad9576e516fd70949427bad4461b65ef423cab1755b71a5a244034')
    
      16
    
      17build() { 
    
      18  cd $srcdir/$pkgname-$pkgver/
    
      19  ./configure --prefix=/usr
    
      20  make
    
      21}
    
      22
    
      23package() {
    
      24  cd $srcdir/$pkgname-$pkgver/
    
      25  make DESTDIR=$pkgdir install
    
      26}
    
      27
    
      28# vim:set ts=2 sw=2 et:
    
      29

Changes since previous scan

--- PKGBUILD @ 2026-06-19 22:34
+++ PKGBUILD @ 2026-10-18 15:22
@@ -3,14 +3,16 @@
 
 pkgname=fusepak
 pkgver=0.5
-pkgrel=2
+pkgrel=3
 pkgdesc="Mount PACK and WAD files via FUSE."
 arch=('x86_64' 'i686')
 url="http://fusepak.sourceforge.net/"
 license=('GPLv2')
 depends=('fuse')
-source=(http://downloads.sourceforge.net/project/$pkgname/$pkgname/$pkgver/$pkgname-$pkgver.tar.gz)
+# the project is gone from SourceForge; Wayback Machine copy of the original tarball (same md5)
+source=($pkgname-$pkgver.tar.gz::https://web.archive.org/web/20150803202234id_/http://iweb.dl.sourceforge.net/project/$pkgname/$pkgname/$pkgver/$pkgname-$pkgver.tar.gz)
 md5sums=('7be66f6f9bdbef20d821784ad476039b')
+sha256sums=('103d826811ad9576e516fd70949427bad4461b65ef423cab1755b71a5a244034')
 
 build() { 
   cd $srcdir/$pkgname-$pkgver/

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-18 15:22:20	Medium	1
2026-06-19 22:34:54	Clean	0