knightsandmerchants-remake-server

LOW

maintainer Maxr 1 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The source is a prebuilt server binary from the project's official domain (kamremake.com), which is not on the standard whitelist but is plausibly legitimate; the worst case of a swapped source is running untrusted code, but this is the official release channel for the project, so the risk is moderate but not clearly malicious.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a prebuilt server binary from the project's official domain (kamremake.com), which is not on the standard whitelist but is plausibly legitimate; the worst case of a swapped source is running untrusted code, but this is the official release channel for the project, so the risk is moderate but not clearly malicious.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:11 source=("${pkgname}-${pkgver}.zip::http://www.kamremake.com/files/kam_remake_server_${pkgver}-zip"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Max Roder <maxroder@mailbox.org>
    
      2
    
      3pkgname='knightsandmerchants-remake-server'
    
      4pkgver='r6720'
    
      5pkgrel='2'
    
      6pkgdesc='Dedicated server for the Knights And Merchants Remake (strategy game)'
    
      7url='http://www.kamremake.com'
    
      8arch=('x86_64' 'i686')
    
      9license=('unknown')
    
      10install="${pkgname}.install"
    
      11source=("${pkgname}-${pkgver}.zip::http://www.kamremake.com/files/kam_remake_server_${pkgver}-zip"
    
      12		"kam-server.sh")
    
      13sha256sums=('4912d3d097fc2741f42be8879cccbfdfc09a1bf83e7b6552c11e6460ff6a9b87'
    
      14            'bf8d39e962b37089a94840d918c496796d589227158ed5f479f37d718e8cb130')
    
      15package() {
    
      16	cd ${srcdir}
    
      17
    
      18	# 775 to allow writing of log files and configuration
    
      19	install -d -m 775 -g games "${pkgdir}/usr/share/${pkgname}/"
    
      20
    
      21	if [[ "$CARCH" == 'i686' ]]; then
    
      22		install -D -m 755 KaM_Remake_Server_x86 "${pkgdir}/usr/share/${pkgname}/KaM_Remake_Server_x86"
    
      23	else
    
      24		install -D -m 755 KaM_Remake_Server_x86_64 "${pkgdir}/usr/share/${pkgname}/KaM_Remake_Server_x86_64"
    
      25	fi
    
      26
    
      27	install -D -m 755 kam-server.sh "${pkgdir}/usr/bin/kam-server"
    
      28}
    
      29
    
      30# vim:set ts=2 sw=2 et:
    
      31
    
      32

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 00:29:17	Low	2