kobodeluxe

maintainer xiota · 4 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads the source tarball from the project's official domain and a Debian patch set from debian.org; both are legitimate sources, with the latter being a standard practice for applying distribution-specific patches, posing no significant risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads the source tarball from the project's official domain and a Debian patch set from debian.org; both are legitimate sources, with the latter being a standard practice for applying distribution-specific patches, posing no significant risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:20 "http://www.olofson.net/kobodl/download/KoboDeluxe-${pkgver}.tar.gz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer:
    
      2# Contributor: Alexander F. Rødseth <xyproto@archlinux.org>
    
      3# Contributor: Felix Yan <felixonmars@archlinux.org>
    
      4# Contributor: Eric Bélanger <eric@archlinux.org>
    
      5
    
      6_pkgname="kobodeluxe"
    
      7pkgname="$_pkgname"
    
      8pkgver=0.5.1
    
      9pkgrel=15
    
      10_debrel=10
    
      11pkgdesc='3rd person scrolling 2D shooter'
    
      12arch=(x86_64)
    
      13url='http://www.olofson.net/kobodl/'
    
      14license=(GPL2 LGPL2.1)
    
      15depends=(
    
      16  'hicolor-icon-theme'
    
      17  'sdl_image'
    
      18)
    
      19source=(
    
      20  "http://www.olofson.net/kobodl/download/KoboDeluxe-${pkgver}.tar.gz"
    
      21  "http://deb.debian.org/debian/pool/main/k/$_pkgname/${_pkgname}_${pkgver}-${_debrel}.debian.tar.xz"
    
      22)
    
      23sha256sums=(
    
      24  '2d5a4c3cd573e39640d4fdf81517eff7cb13fd6d433fc053563e79bb18b8071a'
    
      25  '646102c0e8699dbd1c6d01a4a2bfdc362295414ec1f26c0195d3fba763adca42'
    
      26)
    
      27
    
      28prepare() {
    
      29  cd "KoboDeluxe-$pkgver"
    
      30
    
      31  # apply debian patches
    
      32  xargs -a "$srcdir/debian/patches/series" -d "\n" -i -P 1 \
    
      33    -- patch -p 1 -i "$srcdir/debian/patches/{}"
    
      34
    
      35  # unpack icons
    
      36  tar xf icons.tar.gz
    
      37
    
      38  # fix paths and file names
    
      39  sed -i -e 's:kobo-deluxe:kobodeluxe:' configure{,.in} data/{gfx,sfx}/Makefile{.in,.am}
    
      40
    
      41  # fix .desktop file
    
      42  sed -i -e 's:^Exec=kobodl$:Exec=kobodeluxe:' "icons/KDE/kobo-deluxe.desktop"
    
      43  sed -i -e 's:^Categories=Qt;KDE;Game;ArcadeGame$:Categories=Qt;KDE;Game:' "icons/KDE/kobo-deluxe.desktop"
    
      44
    
      45  # fix scores directory
    
      46  sed -Ei -e 's@^(install-data-hook:)\t\$\(.*\)$@\1\n\tmkdir -p $(DESTDIR)$(kobo_scoredir)@' Makefile.am
    
      47
    
      48  # silence filename warning
    
      49  cp configure.in configure.am
    
      50
    
      51  autoreconf -vfi
    
      52}
    
      53
    
      54build() {
    
      55  cd "KoboDeluxe-$pkgver"
    
      56  ./configure \
    
      57    --prefix=/usr \
    
      58    --localstatedir=/var \
    
      59    --sharedstatedir=/var/lib
    
      60  make
    
      61}
    
      62
    
      63package() {
    
      64  cd "KoboDeluxe-$pkgver"
    
      65  DESTDIR="$pkgdir" make install
    
      66
    
      67  # rename executable
    
      68  mv "$pkgdir/usr/bin/kobodl" "$pkgdir/usr/bin/kobodeluxe"
    
      69
    
      70  # install .desktop file
    
      71  install -D -m644 "icons/KDE/kobo-deluxe.desktop" \
    
      72    "$pkgdir/usr/share/applications/kobodeluxe.desktop"
    
      73
    
      74  # install icons
    
      75  for i in 16 22 32 48 64 128 ; do
    
      76    install -Dm644 "icons/KDE/icons/${i}x${i}/kobodl.png" \
    
      77      "$pkgdir/usr/share/icons/hicolor/${i}x$i/apps/kobodl.png"
    
      78  done
    
      79}
    
      80

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2