gamemaker-beta-bin

LOW

maintainer KittiBytes 9 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The package downloads a .deb from a subdomain of yoyogames.com, the official GameMaker domain, which is plausibly the project's own release infrastructure; installing a prebuilt binary from an official vendor source is normal for AUR packages and not inherently dangerous.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a .deb from a subdomain of yoyogames.com, the official GameMaker domain, which is plausibly the project's own release infrastructure; installing a prebuilt binary from an official vendor source is normal for AUR packages and not inherently dangerous.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:38 "https://gms.yoyogames.com/GameMaker-Beta-${pkgver}.deb"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: KittiBytes <pikalp32@gmail.com> | https://daniela.lol
    
      2# Contributor: Reylyer <reylyercross@gmail.com> | https://github.com/Reylyer
    
      3
    
      4# Package name
    
      5pkgname=gamemaker-beta-bin
    
      6
    
      7# Version
    
      8pkgver=2026.100.0.1149
    
      9pkgrel=1
    
      10
    
      11# Generic
    
      12pkgdesc="Make a game with GameMaker, the best free video game engine. Perfect for beginners and professionals."
    
      13arch=('x86_64')
    
      14url="https://gamemaker.io"
    
      15license=('custom')
    
      16
    
      17# Dependencies
    
      18depends=(
    
      19    'linuxdeploy'
    
      20    'obsolete-appimagetool-bin'
    
      21    'clang'
    
      22    'openal'
    
      23    'unzip'
    
      24    'zip'
    
      25    'gamemaker-steamruntime-sdk-bin'
    
      26)
    
      27
    
      28# Package relations
    
      29provides=('gamemaker-beta')
    
      30conflicts=('gamemaker-beta')
    
      31
    
      32# Others
    
      33options=(!strip)
    
      34
    
      35# Sources
    
      36# https://gms.yoyogames.com/GameMaker-Beta-2026.100.0.1149.deb
    
      37source=(
    
      38    "https://gms.yoyogames.com/GameMaker-Beta-${pkgver}.deb"
    
      39    "LICENSE.txt"    
    
      40)
    
      41sha256sums=(
    
      42    '9f71edb588aea864fb0b0197f0545ef1a20ef7040d7f00321c02068592a5d464'
    
      43    '9ebe45546ac7bb43156c62f42947ccaf660f96cd4fcc684f42df49754aaeac51'
    
      44)
    
      45
    
      46package() {
    
      47    bsdtar -xf "${srcdir}/data.tar.zst" -C "${pkgdir}"
    
      48
    
      49    install -Dm644 LICENSE.txt "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE.txt"
    
      50}
    
      51

Changes since previous scan

--- PKGBUILD @ 2026-09-10 00:22
+++ PKGBUILD @ 2026-09-17 00:27
@@ -5,7 +5,7 @@
 pkgname=gamemaker-beta-bin
 
 # Version
-pkgver=2026.100.0.1142
+pkgver=2026.100.0.1149
 pkgrel=1
 
 # Generic
@@ -33,13 +33,13 @@
 options=(!strip)
 
 # Sources
-# https://gms.yoyogames.com/GameMaker-Beta-2026.100.0.1142.deb
+# https://gms.yoyogames.com/GameMaker-Beta-2026.100.0.1149.deb
 source=(
     "https://gms.yoyogames.com/GameMaker-Beta-${pkgver}.deb"
     "LICENSE.txt"    
 )
 sha256sums=(
-    'ba064e6cf1d530d0cf481620abcd4a897f6d004badd7f40de5475ada64d548f0'
+    '9f71edb588aea864fb0b0197f0545ef1a20ef7040d7f00321c02068592a5d464'
     '9ebe45546ac7bb43156c62f42947ccaf660f96cd4fcc684f42df49754aaeac51'
 )
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 17:21:08	Medium	1
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 15:51:02	Medium	1
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2