gamemaker-beta-bin

maintainer KittiBytes · 9 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package downloads a .deb from gms.yoyogames.com, a domain plausibly associated with the official GameMaker project, and extracts it to install the software; this is a normal AUR packaging pattern for binary distributions, and the checksums are provided and verified.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a .deb from gms.yoyogames.com, a domain plausibly associated with the official GameMaker project, and extracts it to install the software; this is a normal AUR packaging pattern for binary distributions, and the checksums are provided and verified.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:38 "https://gms.yoyogames.com/GameMaker-Beta-${pkgver}.deb"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: KittiBytes <pikalp32@gmail.com> | https://daniela.lol
2# Contributor: Reylyer <reylyercross@gmail.com> | https://github.com/Reylyer
3
4# Package name
5pkgname=gamemaker-beta-bin
6
7# Version
8pkgver=2026.100.0.1110
9pkgrel=1
10
11# Generic
12pkgdesc="Make a game with GameMaker, the best free video game engine. Perfect for beginners and professionals."
13arch=('x86_64')
14url="https://gamemaker.io"
15license=('custom')
16
17# Dependencies
18depends=(
19 'linuxdeploy'
20 'obsolete-appimagetool-bin'
21 'clang'
22 'openal'
23 'unzip'
24 'zip'
25 'gamemaker-steamruntime-sdk-bin'
26)
27
28# Package relations
29provides=('gamemaker-beta')
30conflicts=('gamemaker-beta')
31
32# Others
33options=(!strip)
34
35# Sources
36# https://gms.yoyogames.com/GameMaker-Beta-2026.100.0.1110.deb
37source=(
38 "https://gms.yoyogames.com/GameMaker-Beta-${pkgver}.deb"
39 "LICENSE.txt"
40)
41sha256sums=(
42 '3de3b5648b9e61994a2f477e25c9550bf96946ff3e948f653e94e92ce00c81a1'
43 '9ebe45546ac7bb43156c62f42947ccaf660f96cd4fcc684f42df49754aaeac51'
44)
45
46package() {
47 bsdtar -xf "${srcdir}/data.tar.zst" -C "${pkgdir}"
48
49 install -Dm644 LICENSE.txt "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE.txt"
50}
51

Changes since previous scan

--- PKGBUILD @ 2026-07-24 00:02
+++ PKGBUILD @ 2026-08-03 00:08
@@ -5,7 +5,7 @@
pkgname=gamemaker-beta-bin
# Version
-pkgver=2026.100.0.1104
+pkgver=2026.100.0.1110
pkgrel=1
# Generic
@@ -33,13 +33,13 @@
options=(!strip)
# Sources
-# https://gms.yoyogames.com/GameMaker-Beta-2026.100.0.1104.deb
+# https://gms.yoyogames.com/GameMaker-Beta-2026.100.0.1110.deb
source=(
"https://gms.yoyogames.com/GameMaker-Beta-${pkgver}.deb"
"LICENSE.txt"
)
sha256sums=(
- '87b53f88e723fb7b324b35c97abd13e5f8d49d30fa267e3e8314720dffb6cf9b'
+ '3de3b5648b9e61994a2f477e25c9550bf96946ff3e948f653e94e92ce00c81a1'
'9ebe45546ac7bb43156c62f42947ccaf660f96cd4fcc684f42df49754aaeac51'
)

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 03:17:12 MEDIUM 1
2026-07-24 00:02:28 CLEAN 2
2026-07-23 17:25:21 MEDIUM 1
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2
2026-07-14 00:09:48 LOW 2
2026-07-13 00:19:36 LOW 2
2026-07-12 00:27:26 LOW 2
2026-07-11 00:25:18 LOW 2
2026-07-10 00:20:30 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion