hmcl-no-download-restriction

LOW

maintainer Amenatsu 0 votes scanned 2026-10-20 09:27:54.737837

View on AUR

Why flagged

The package builds from source hosted on GitHub, removes a download restriction via a clear patch, and uses preconfigured Microsoft Azure credentials for convenience; the credentials are publicly documented and not inherently malicious, posing minimal risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from source hosted on GitHub, removes a download restriction via a clear patch, and uses preconfigured Microsoft Azure credentials for convenience; the credentials are publicly documented and not inherently malicious, posing minimal risk.

PKGBUILD

      1# Maintainer: KirishimaAmenatsu <rainsummertse@outlook.com>
    
      2# Based on the AUR package "hmcl" by Misaka13514 <Misaka13514 at gmail dot com>
    
      3# Contributors of the original package:
    
      4#   Hao Long <imlonghao@archlinuxcn.org>
    
      5#   Lin Ruoshui <LinRs at users.noreply.github dot com>
    
      6#   hexchain <i at hexchain.org>
    
      7
    
      8pkgname=hmcl-no-download-restriction
    
      9_pkgname=HMCL
    
      10pkgver=3.17.0.361.r1.g583e004d7
    
      11_commit=583e004d718102ae4489aa3f64bcde0c0161d000
    
      12pkgrel=1
    
      13pkgdesc="A Minecraft launcher with the mainland China game download restriction removed"
    
      14arch=('any')
    
      15url="https://github.com/HMCL-dev/HMCL"
    
      16license=('GPL-3.0-or-later')
    
      17depends=('java-runtime' 'hicolor-icon-theme')
    
      18makedepends=('java-environment-openjdk=17')
    
      19install="$pkgname.install"
    
      20source=("hmcl-launch-script"
    
      21        "${pkgname}.desktop"
    
      22        "revert-583e004.patch"
    
      23        "${pkgname}-${pkgver}.tar.gz::${url}/archive/${_commit}.tar.gz")
    
      24b2sums=('72e2f9aa78f7755cbb6b25854111d5f8ca68cf6135de570782fff15303cd55bb7d4a9377aa2272bcf445ad8e352e455ad75f7c2f69e06cf38e80d86fe1482426'
    
      25        'db6a4afbe8a5b9698d160a0f31eb91c8c727eb9f5c2742f15366443537b30b11dd3f25d6598cc01fbc362ab249deccc5d94f338f39bd60ab09e8b5480b4d3fd7'
    
      26        'fa3cd15df62613086917aa2270a0ccad957e547b8eb59516aea056b75764f76e18ccf07631caef60ac379b246184eb4cab6071b96df3f28140658efa4a746159'
    
      27        'f6903d4b349053177df76f87f935731eb703c19b9ded3b51b62c9fbdd044b5d598d8038954c229e801967aac8332580cf026cb35766501bb6648f610632c7f89')
    
      28
    
      29prepare() {
    
      30  cd "${_pkgname}-${_commit}"
    
      31
    
      32  # Revert upstream commit 583e004, which disables game downloads in mainland China.
    
      33  patch -Np1 -i "${srcdir}/revert-583e004.patch"
    
      34}
    
      35
    
      36build() {
    
      37  # Pre-configured Microsoft Azure app credentials for HMCL's Microsoft login feature.
    
      38  # These are maintained by the AUR hmcl package maintainer (Misaka13514) to ensure
    
      39  # out-of-box functionality for users who cannot register their own Azure application.
    
      40  #
    
      41  # Registration guide:
    
      42  # https://learn.microsoft.com/en-us/entra/identity-platform/quickstart-register-app
    
      43  # https://help.minecraft.net/hc/en-us/articles/16254801392141
    
      44  export MICROSOFT_AUTH_ID='004be3ca-1c2a-4dc1-b805-d06494b3e968'
    
      45  export MICROSOFT_AUTH_SECRET='~mD8Q~J1C4cwiiEoTUdR3XYA96Jobsp.EZEnCauP'
    
      46
    
      47  cd "${_pkgname}-${_commit}"
    
      48  export JAVA_HOME=/usr/lib/jvm/java-17-openjdk
    
      49  ./gradlew clean build --no-daemon
    
      50}
    
      51
    
      52package() {
    
      53  # custom launch script
    
      54  install -Dm755 "hmcl-launch-script" "${pkgdir}/usr/bin/${pkgname}"
    
      55  # desktop file
    
      56  install -Dm644 "${pkgname}.desktop" "${pkgdir}/usr/share/applications/${pkgname}.desktop"
    
      57
    
      58  cd "${_pkgname}-${_commit}/${_pkgname}/build"
    
      59
    
      60  # install jar
    
      61  _path=$(echo libs/HMCL*.jar)
    
      62  install -Dm644 "$_path" "${pkgdir}/usr/share/java/${pkgname}/${pkgname}.jar"
    
      63  # install icons
    
      64  local _icon _iconfile
    
      65  for _icon in 32:icon.png 64:icon@2x.png 128:icon@4x.png 256:icon@8x.png; do
    
      66    _iconfile=${_icon#*:}
    
      67    _icon=${_icon%:*}
    
      68    install -Dm644 "resources/main/assets/img/${_iconfile}" "${pkgdir}/usr/share/icons/hicolor/${_icon}x${_icon}/apps/${pkgname}.png"
    
      69  done
    
      70}
    
      71

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-20 09:27:54	Low	2