jzintv

LOW
maintainer cargabsj175 4 votes scanned 2026-09-17 00:27:14.276658
View on AUR
Why flagged

The source is a versioned, checksummed source code archive from the project's official host; building from source is normal for AUR packages, and the host, while not whitelisted, is the project's own domain.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a versioned, checksummed source code archive from the project's official host; building from source is normal for AUR packages, and the host, while not whitelisted, is the project's own domain.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:14 source=(http://spatula-city.org/~im14u2c/intv/dl/jzintv-${pkgver}-src.zip

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Eric DeStefano <eric at ericdestefano dot com>
2# Contributor: Chris Simpson <csimpson.aur at gmail dot com>
3# Contributor: Carlos Sánchez <cargabsj175 at gmail dot com>
4
5pkgname=jzintv
6pkgver=20200712
7pkgrel=1
8pkgdesc="Intellivision Emulator"
9arch=('x86_64')
10url="http://spatula-city.org/~im14u2c/intv/"
11license=('GPL')
12depends=('gcc-libs' 'sdl')
13provides=('jzintv')
14source=(http://spatula-city.org/~im14u2c/intv/dl/jzintv-${pkgver}-src.zip
15 jzintv-20200712-termios.patch)
16sha512sums=('c7f30018fc5324c48b156b654b9e56b12614f8eb7c67c5a52146241ff985d972fb9d330aafde701e572d355c945e2b9c07145058e7d9e500bf2380b8a78a4ba7'
17 '5de6a59e280239983d72989ab16c384d9d8b534d3cf48b795635e7bd3fea9bb0a28366d5542e75b69276b4fd2d2e6efb58d736a82fd1b3d1990659f38f20e909')
18
19prepare() {
20 cd "${srcdir}/${pkgname}-${pkgver}-src/src"
21 patch -Np2 -i "${srcdir}/jzintv-${pkgver}-termios.patch"
22 find . -type f -name "Makefile*" -exec sed -i 's/-ltermcap/-lncurses/g' {} +
23}
24
25build() {
26 cd "${srcdir}/${pkgname}-${pkgver}-src/src"
27 make -f Makefile ../bin/jzintv
28}
29
30package() {
31 install -d ${pkgdir}/usr/bin ${pkgdir}/usr/share/${pkgname}/{examples,rom} ${pkgdir}/usr/share/doc/${pkgname}
32 install -D ${srcdir}/${pkgname}-${pkgver}-src/bin/jzintv -t ${pkgdir}/usr/bin/
33 install -D ${srcdir}/${pkgname}-${pkgver}-src/examples/*.txt -t ${pkgdir}/usr/share/jzintv/examples/
34 install -D ${srcdir}/${pkgname}-${pkgver}-src/rom/* -t ${pkgdir}/usr/share/jzintv/rom/
35 install -Dm644 ${srcdir}/${pkgname}-${pkgver}-src/COPYING.txt "${pkgdir}/usr/share/licenses/$pkgname/LICENSE"
36 cp -Ra ${srcdir}/${pkgname}-${pkgver}-src/doc/* ${pkgdir}/usr/share/doc/${pkgname}/
37}
38

Scan history

Scanned at (UTC)SeverityRules
2026-09-17 00:27:14 Low 2
2026-09-16 00:03:17 Low 2
2026-09-15 00:25:31 Low 2
2026-09-14 00:27:57 Low 2
2026-09-13 00:19:54 Low 2
2026-09-12 00:25:17 Low 2
2026-09-11 00:19:22 Low 2
2026-09-10 00:22:44 Low 2
2026-09-09 00:04:09 Low 2
2026-09-08 00:18:08 Low 2
2026-09-07 00:30:15 Low 2
2026-09-06 00:17:06 Low 2
2026-09-05 00:16:27 Low 2
2026-09-04 00:03:13 Low 2
2026-09-03 00:15:47 Low 2
2026-09-02 00:02:31 Low 2
2026-09-01 00:11:19 Low 2
2026-08-31 00:19:57 Low 2
2026-08-30 00:04:14 Low 2
2026-08-29 00:29:17 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion