i8086emu-git

maintainer andreas_baumann · 2 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The source uses SourceForge URLs, which are non-whitelisted but plausibly official for the project; the patches are hosted on the same domain and are applied during prepare(), but the main source is built from a git repository, and there is no evidence of malicious payloads or remote code execution.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 90%): The source uses SourceForge URLs, which are non-whitelisted but plausibly official for the project; the patches are hosted on the same domain and are applied during prepare(), but the main source is built from a git repository, and there is no evidence of malicious payloads or remote code execution.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:18 source=('i8086emu::git+https://git.code.sf.net/p/i8086emu/git.git'

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Andreas Baumann <mail@andreasbaumann.cc>
2# Contributor: MGislv <nocentinigabriele91@gmail.com>
3# Contributor: Darren Ng <$(base64 --decode <<<VW4xR2ZuQGdtYWlsLmNvbQo=)>
4
5pkgname=i8086emu-git
6pkgver=0.9.2.r35.1143f09
7pkgrel=5
8pkgdesc='Cross-platform emulator for the Intel 8086 microprocessor'
9arch=('x86_64')
10url='http://i8086emu.sourceforge.net/'
11license=('GPL')
12depends=('gtk2')
13makedepends=('git' 'nasm' 'beep')
14optdepends=('beep: PC-speaker access via asm')
15provides=('i8086emu')
16conflicts=('i8086emu')
17
18source=('i8086emu::git+https://git.code.sf.net/p/i8086emu/git.git'
19 'i8086emu.desktop'
20 'extern.patch::https://sourceforge.net/p/i8086emu/patches/9/attachment/extern.patch'
21 'fmt.patch::https://sourceforge.net/p/i8086emu/patches/_discuss/thread/5e30f26d55/b83c/attachment/fmt.patch'
22 'compilation.patch')
23sha512sums=('SKIP'
24 'c0501f63012b74fb8e48cdef3c27ac52546308b82cf6a97527e36ef2ea6cee0ff874c804745252b678d13932e0e1aeaa48812189c5d7599a36484a30d453d81e'
25 '05c6354741db54ed335bb0f4519b4693add6d2c0780170311f773b05207e28fcb0ce8aadd4d1160429752d94e8d5afe13e1175478421ea1624571801d96f948a'
26 'b3cd89c20c38c581c12ebad5ae09f4f48fbd4eeef0e80c37be774b0156a06eb435483e7e1563796d60a06112d80383d0b2a146bf24246d7701577da44bf989d3'
27 '23b36265c9f4f8e39d0128e78d9b8648c85cbf7dfa4a73e3acf1f86eb70e84e7eb1183b81d8d709cd6b092bb2c3b3b99f0068ab49db95164f2b5ec487893d208')
28
29pkgver() {
30 cd i8086emu
31 printf "%s" "$(git describe --long --tags | sed 's/^v//;s/\([^-]*-\)g/r\1/;s/-/./g')"
32}
33
34prepare() {
35 cd i8086emu
36 patch --forward --strip=1 --input="${srcdir}/extern.patch"
37 patch --forward --strip=1 --input="${srcdir}/fmt.patch"
38 patch --forward --strip=1 --input="${srcdir}/compilation.patch"
39 cd i8086emu/src
40 sed -i 's/"@usegtk@" != "0"/"0" == "0"/g' Makefile.in
41}
42
43build() {
44 cd i8086emu/i8086emu
45 ./configure --prefix=/usr \
46 --sysconfdir=/etc \
47 --infodir=/usr/share/info \
48 CFLAGS="$CFLAGS -fPIC $LDFLAGS" LDFLAGS="$LDFLAGS" usegtk=1
49 make
50}
51
52package() {
53 cd i8086emu/i8086emu
54 make DESTDIR="${pkgdir}" install
55
56 install -dm755 "${pkgdir}/usr/share/applications"
57 install -Dm644 "${srcdir}/i8086emu.desktop" "${pkgdir}/usr/share/applications/i8086emu.desktop"
58}
59

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion