gow3-pc-bin

MEDIUM

maintainer mak_freemanHL 0 votes scanned 2026-10-21 07:31:05.029830

View on AUR

Why flagged

The package installs a prebuilt AppImage from a GitHub release, which is an unverifiable executable binary; if compromised, it could execute arbitrary code, representing a supply-chain risk despite the project being open-source.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review of an ambiguous pattern llm_review

The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it MEDIUM (confidence 95%): The package installs a prebuilt AppImage from a GitHub release, which is an unverifiable executable binary; if compromised, it could execute arbitrary code, representing a supply-chain risk despite the project being open-source.

PKGBUILD

      1# Maintainer: mak <mak@localhost>
    
      2pkgname=gow3-pc-bin
    
      3pkgver=2.6.0
    
      4pkgrel=1
    
      5pkgdesc="God of War III Remastered native PC port (SpartanPort, requires your own game dump)"
    
      6arch=('x86_64')
    
      7url="https://github.com/FelipePrado0/SpartanPort"
    
      8license=('GPL-2.0-or-later')
    
      9depends=('glibc' 'gcc-libs' 'systemd-libs' 'vulkan-icd-loader' 'fuse2')
    
      10provides=('gow3-pc')
    
      11conflicts=('gow3-pc')
    
      12options=('!strip')
    
      13source=("spartanport-x86_64.AppImage::https://github.com/FelipePrado0/SpartanPort/releases/download/windows-v${pkgver}/spartanport-x86_64.AppImage"
    
      14        'LICENSE'
    
      15        'gow3-pc'
    
      16        'gow3-pc.desktop'
    
      17        'gow3-pc.png')
    
      18sha256sums=('0b3a09e301065dc2fe87b2b47166dd6747d51a35295b2baebc2e4e082350cec1'
    
      19            'edaef632cbb643e4e7a221717a6c441a4c1a7c918e6e4d56debc3d8739b233f6'
    
      20            '7fe0c2c08d62206e23a2e100a4494d59f457d02b7b93b3ebe2914f7f43a2d68d'
    
      21            '355fba0cdf552e38fe876d2a74eccb3cbc23189fc31ff5910b42415e5e3e3078'
    
      22            '6bed8f45886e9c2ee18f8102b23cf72e50cb068c57c52f8c67121a6ef7d55d66')
    
      23
    
      24package() {
    
      25  install -Dm755 "$srcdir/spartanport-x86_64.AppImage" \
    
      26    "$pkgdir/opt/ports/gow3-pc/spartanport.AppImage"
    
      27  install -Dm755 "$srcdir/gow3-pc" "$pkgdir/usr/bin/gow3-pc"
    
      28  install -Dm644 "$srcdir/gow3-pc.desktop" \
    
      29    "$pkgdir/usr/share/applications/gow3-pc.desktop"
    
      30  install -Dm644 "$srcdir/gow3-pc.png" \
    
      31    "$pkgdir/usr/share/icons/hicolor/512x512/apps/gow3-pc.png"
    
      32  install -Dm644 "$srcdir/LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      33}
    
      34

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-21 07:31:05	Medium	2