gulchce-bin

LOW

maintainer lukerb52 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package is a recently uploaded AUR package with few votes, but it builds from a tagged release in a public GitHub repository, installs only data and prebuilt binaries from that release, and does not execute untrusted remote code or exfiltrate data; the low severity is due to typical AUR new-package risk, not active malice.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package is a recently uploaded AUR package with few votes, but it builds from a tagged release in a public GitHub repository, installs only data and prebuilt binaries from that release, and does not execute untrusted remote code or exfiltrate data; the low severity is due to typical AUR new-package risk, not active malice.

PKGBUILD

      1# Maintainer: Luke Bubar <luke@coldmail.xyz>
    
      2
    
      3pkgname=gulchce-bin
    
      4_pkgname=gulchce
    
      5pkgver=150
    
      6_commit=b7e7da5eb9436a3df523b3c7170eae5394b946db # the commit tagged build-$pkgver
    
      7pkgrel=1
    
      8pkgdesc='OpenCE fork with experimental features such as Halo MCC custom maps (needs your own Xbox disc image)'
    
      9arch=('x86_64')
    
      10url='https://github.com/chestahh/GulchCE'
    
      11
    
      12# The port is CC0; the rest are the libraries built into it, whose license
    
      13# files come with the release.
    
      14license=('CC0-1.0' 'Apache-2.0' 'BSD-3-Clause' 'BSD-4-Clause' 'ISC' 'MIT' 'OFL-1.1' 'Zlib')
    
      15# The game is 32-bit x86 code (its data has 32-bit pointers, as on the Xbox).
    
      16# The release brings its own SDL3, which loads the rest when it starts.
    
      17depends=('lib32-glibc' 'lib32-gcc-libs' 'lib32-libx11' 'lib32-libxext' 'lib32-mesa'
    
      18         'hicolor-icon-theme')
    
      19optdepends=('lib32-nvidia-utils: graphics on NVIDIA cards'
    
      20            'lib32-pipewire: sound through PipeWire (one of the sound libraries is needed for sound)'
    
      21            'lib32-libpulse: sound through PulseAudio'
    
      22            'lib32-alsa-lib: sound through ALSA'
    
      23            'lib32-wayland: a native Wayland window instead of XWayland (with lib32-libxkbcommon)'
    
      24            'lib32-libxkbcommon: a native Wayland window instead of XWayland (with lib32-wayland)'
    
      25            'lib32-libdecor: window borders on GNOME under Wayland'
    
      26            'zenity: the disc image picker at the first start, where there is no desktop portal'
    
      27            'xdg-utils: invite links that open the game')
    
      28provides=("$_pkgname")
    
      29conflicts=("$_pkgname")
    
      30# Upstream's files as they are: its crash reports name addresses in this build.
    
      31options=('!strip' '!debug')
    
      32install="$pkgname.install"
    
      33_raw="https://raw.githubusercontent.com/chestahh/GulchCE/$_commit"
    
      34source=("halo-linux-release-$pkgver.zip::$url/releases/download/build-$pkgver/halo-linux-release.zip"
    
      35        "LICENSE-$pkgver.md::$_raw/LICENSE.md"
    
      36        "LINUX-$pkgver.md::$_raw/port/linux/README.md"
    
      37        "MCC-$pkgver.md::$_raw/docs/mcc_maps.md"
    
      38        "icon-256-$pkgver.png::$_raw/port/assets/icon/opence-icon-256.png"
    
      39        "icon-512-$pkgver.png::$_raw/port/assets/icon/opence-icon.png"
    
      40        'gulchce.sh'
    
      41        'gulchce.desktop')
    
      42sha256sums=('ffc8eff67dbc23fd18154b72b58e8aca6d0f3c5dc96896a4f3416a49ad9a5203'
    
      43            'a2010f343487d3f7618affe54f789f5487602331c0a8d03f49e9a7c547cf0499'
    
      44            '0527a6c96c139873a56e35b8b8a1c66e1d301a28e26b95db0294ff61630c1f94'
    
      45            'f2b8a07d6f9612ee29b939dce19597e67cd8db41c5ab5b91a45a1995d5f2935f'
    
      46            '800572a2fdb7ad2521522b2a0a11d31f13f8dd9183a4314ff0849209f8732509'
    
      47            '4bfa804c3d8ee9d382cf05d5446d2fc6b01b40d2a047b1b76d897c96f9a8c74d'
    
      48            '38858896b99ec6870cef42a0fbf70ec8e9818591e21a079552172301d6412f4b'
    
      49            'f370c4c20dc62d183e96e97081f2b7af182577e28d65c5e70e6fda5a439a8e83')
    
      50
    
      51package() {
    
      52  install -Dm755 halo "$pkgdir/usr/lib/$_pkgname/halo"
    
      53  install -Dm755 libSDL3.so.0 "$pkgdir/usr/lib/$_pkgname/libSDL3.so.0"
    
      54  install -Dm644 brokers.txt "$pkgdir/usr/lib/$_pkgname/brokers.txt"
    
      55  install -Dm755 gulchce.sh "$pkgdir/usr/bin/$_pkgname"
    
      56
    
      57  install -Dm644 gulchce.desktop "$pkgdir/usr/share/applications/$_pkgname.desktop"
    
      58  install -Dm644 "icon-256-$pkgver.png" "$pkgdir/usr/share/icons/hicolor/256x256/apps/$_pkgname.png"
    
      59  install -Dm644 "icon-512-$pkgver.png" "$pkgdir/usr/share/icons/hicolor/512x512/apps/$_pkgname.png"
    
      60
    
      61  # The controls, the settings and multiplayer; installing MCC maps
    
      62  install -Dm644 "LINUX-$pkgver.md" "$pkgdir/usr/share/doc/$_pkgname/LINUX.md"
    
      63  install -Dm644 "MCC-$pkgver.md" "$pkgdir/usr/share/doc/$_pkgname/MCC.md"
    
      64
    
      65  install -Dm644 "LICENSE-$pkgver.md" "$pkgdir/usr/share/licenses/$pkgname/LICENSE.md"
    
      66  install -Dm644 -t "$pkgdir/usr/share/licenses/$pkgname" ./*-LICENSE.txt ./*-COPYING.txt ./*-OFL.txt
    
      67}
    
      68

Changes since previous scan

--- PKGBUILD @ 2026-10-16 19:16
+++ PKGBUILD @ 2026-10-17 00:21
@@ -2,8 +2,8 @@
 
 pkgname=gulchce-bin
 _pkgname=gulchce
-pkgver=114
-_commit=72b6e1b75345876647496179010d0ecf3362e175 # the commit tagged build-$pkgver
+pkgver=150
+_commit=b7e7da5eb9436a3df523b3c7170eae5394b946db # the commit tagged build-$pkgver
 pkgrel=1
 pkgdesc='OpenCE fork with experimental features such as Halo MCC custom maps (needs your own Xbox disc image)'
 arch=('x86_64')
@@ -39,10 +39,10 @@
         "icon-512-$pkgver.png::$_raw/port/assets/icon/opence-icon.png"
         'gulchce.sh'
         'gulchce.desktop')
-sha256sums=('93138bdf63851f7c580b7eb57588809fd10a1d618f3196a73cdd2b74651321bb'
+sha256sums=('ffc8eff67dbc23fd18154b72b58e8aca6d0f3c5dc96896a4f3416a49ad9a5203'
             'a2010f343487d3f7618affe54f789f5487602331c0a8d03f49e9a7c547cf0499'
-            '9b7caed04a1fec5546f9003bd4adfd46f526748bc938a9a9571a70de67ae1553'
-            'd69510f83f3eb25070af98d5afe6d3b125e17b55b432db565aae62800bb3fdb4'
+            '0527a6c96c139873a56e35b8b8a1c66e1d301a28e26b95db0294ff61630c1f94'
+            'f2b8a07d6f9612ee29b939dce19597e67cd8db41c5ab5b91a45a1995d5f2935f'
             '800572a2fdb7ad2521522b2a0a11d31f13f8dd9183a4314ff0849209f8732509'
             '4bfa804c3d8ee9d382cf05d5446d2fc6b01b40d2a047b1b76d897c96f9a8c74d'
             '38858896b99ec6870cef42a0fbf70ec8e9818591e21a079552172301d6412f4b'

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 23:16:14	Low	2
2026-10-16 19:16:12	Low	1
2026-10-16 03:14:05	Low	1
2026-10-15 00:28:05	Clean	2
2026-10-14 23:21:11	Low	1