maniac-mansion

maintainer dreieck · 0 votes · base maniac-mansion-dott-bin · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The flagged non-standard host (classicgaming.cc) hosts only a PNG icon file, which is non-executable data; the actual game data comes from a local file and a trusted dependency, posing no code execution risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 90%): The flagged non-standard host (classicgaming.cc) hosts only a PNG icon file, which is non-executable data; the actual game data comes from a local file and a trusted dependency, posing no code execution risk.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:30 "Maniac_Mansion_Icon.png::https://www.classicgaming.cc/pc/maniac-mansion/images/icons/icon-maniac-mansion-logo-128x128.png"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: dreieck (https://aur.archlinux.org/account/dreieck)
2
3pkgbase="maniac-mansion-dott-bin"
4pkgname=(
5 "maniac-mansion-data-bin"
6 "maniac-mansion"
7)
8_pkgver_game="2"
9pkgver="${_pkgver_game}"
10pkgrel=2
11epoch=1
12arch=(
13 'any'
14)
15pkgdesc='Maniac Mansion ("version 2"/ "release 3" from 1989), extracted from "Day of the Tentacle Remastered".'
16url="http://www.maniacmansionfan.50webs.com/versions.html"
17license=(
18 'LicenseRef-Proprietary'
19)
20groups=('games')
21makedepends=(
22 'day-of-the-tentacle-remastered'
23 'zopfli' # for 'zopflipng'
24 'untangle'
25)
26checkdepends=()
27_archivename="gog_day_of_the_tentacle_remastered_${_pkgver_gog}.sh"
28source=(
29 "maniac-mansion.sh"
30 "Maniac_Mansion_Icon.png::https://www.classicgaming.cc/pc/maniac-mansion/images/icons/icon-maniac-mansion-logo-128x128.png"
31 "maniac-mansion.desktop"
32 "license-note-proprietary.txt"
33)
34sha256sums=(
35 '387d1bdd548a3beb142216b8ae60144102275666238edf07c183999003a865ac' # maniac-mansion.sh
36 '7a6cf4eee9695250bd38754bc93f3ddecc0ce69dcfb149d750ec1d162dfa1d30' # Maniac_Mansion_Icon.png
37 '54e01410d29c2ed264837f92acbc16173b4bd1987697ddc74c1be6221b9a3c4a' # maniac-mansion.desktop
38 '60e12a5ca3a012e0379819d2239c0b8c6157286e144f30978643895c7162af52' # license-note-proprietary.txt
39)
40
41prepare() {
42 cd "${srcdir}"
43 if [ -e "maniac-mansion" ]; then
44 rm -Rf "maniac-mansion"
45 fi
46 mkdir -p maniac-mansion
47
48 msg2 "Extracting Maniac Mansion ..."
49 cd maniac-mansion
50 untangle -x -F 'maniac/*' "/usr/lib/dott/tenta.cle"
51}
52
53build() {
54 msg2 "Size-optimising 'Maniac_Mansion_Icon.png' ..."
55 zopflipng -m -y "${srcdir}/Maniac_Mansion_Icon.png" "${srcdir}/maniac-mansion.png"
56}
57
58package_maniac-mansion-data-bin() {
59 pkgdesc='Data files of "Maniac Mansion", version 2/ release 3, from 1989. To be played with ScummVM.'
60 arch=('any')
61 optdepends=(
62 "maniac-mansion: To run the game via '/usr/bin/maniac-mansion'."
63 'scummvm: To run the game manually with ScummVM.'
64 )
65 provides=(
66 "maniac-mansion-data=v2"
67 "maniac-mansion-data=release3"
68 )
69 conflicts=(
70 "maniac-mansion-data"
71 "maniac-mansion-original-data-bin=1.4.1+gog2.1.0.2" # Due to package renaming.
72 )
73 replaces=(
74 "maniac-mansion-original-data-bin=1.4.1+gog2.1.0.2" # Due to package renaming.
75 )
76
77 install -Dvm644 -t "${pkgdir}/usr/lib/maniac-mansion" "${srcdir}/maniac-mansion/maniac"/*
78 install -Dvm644 "${srcdir}/maniac-mansion.png" "${pkgdir}/usr/share/pixmaps/maniac-mansion.png"
79 install -Dvm644 "${srcdir}/license-note-proprietary.txt" "${pkgdir}/usr/share/licenses/${pkgname}/license-note-proprietary.txt"
80}
81
82package_maniac-mansion() {
83 pkgdesc='Standalone ScummVM based launcher script for the original game "Maniac Mansion" (any version).'
84 arch=('any')
85 license=("GPL-3.0-or-later")
86 depends=(
87 "maniac-mansion-data"
88 "scummvm"
89 "sh"
90 )
91 provides=(
92 "maniac-mansion"
93 )
94 conflicts=(
95 "maniac-mension"
96 "maniac-mansion-original=1.4.1+gog2.1.0.2" # Due to package renaming.
97 )
98 replaces=(
99 "maniac-mansion-original=1.4.1+gog2.1.0.2" # Due to package renaming.
100 )
101
102 install -Dvm755 "${srcdir}/maniac-mansion.sh" "${pkgdir}/usr/bin/maniac-mansion"
103 install -Dvm644 -t "${pkgdir}/usr/share/applications" "${srcdir}/maniac-mansion.desktop"
104}
105

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion