mcpelauncher-ui-bin
maintainer kaolinite7
· 0 votes
· scanned 2026-08-03 00:08:14.047287
MEDIUM
View on AUR ↗
Why flagged
Downloads and installs a prebuilt binary .deb from a GitHub Pages host (minecraft-linux.github.io) with a SKIP'd checksum, meaning the binary cannot be verified; while the host appears to be the project's own distribution channel, the SKIP'd checksum means a silently swapped or tampered binary would go undetected.
Triggered rules
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:13
source=("https://minecraft-linux.github.io/pkg/deb/pool/bookworm/main/m/mcpelauncher-ui-manifest/mcpelauncher-ui-manifest_${pkgver}_amd64.deb")
MEDIUM
AI review
llm_review
An AI model (anthropic/claude-sonnet-4.6) reviewed this and agrees it is MEDIUM (confidence 70%): Downloads and installs a prebuilt binary .deb from a GitHub Pages host (minecraft-linux.github.io) with a SKIP'd checksum, meaning the binary cannot be verified; while the host appears to be the project's own distribution channel, the SKIP'd checksum means a silently swapped or tampered binary would go undetected.
PKGBUILD
1 offending line(s) highlighted
1
pkgname=mcpelauncher-ui-bin
2
pkgver=1.7.6.28199233421.1~bookworm
3
pkgrel=1
4
pkgdesc="Minecraft Bedrock Launcher for Linux"
5
arch=('x86_64')
6
url="https://minecraft-linux.github.io"
7
license=('GPL-3.0-only' 'MIT')
8
provides=(mcpelauncher-ui)
9
conflicts=(mcpelauncher-ui mcpelauncher-ui-git)
10
depends=(curl glibc hicolor-icon-theme libgcc libstdc++ libzip mcpelauncher-client openssl protobuf3.21 qt6-base qt6-declarative qt6-webchannel qt6-webengine zlib)
11
makedepends=(imagemagick)
12
13
source=("https://minecraft-linux.github.io/pkg/deb/pool/bookworm/main/m/mcpelauncher-ui-manifest/mcpelauncher-ui-manifest_${pkgver}_amd64.deb")
14
b2sums=('SKIP')
15
noextract=("mcpelauncher-ui-manifest_${pkgver}_amd64.deb")
16
17
package() {
18
ar vx "${srcdir}/mcpelauncher-ui-manifest_${pkgver}_amd64.deb" data.tar.gz 1>/dev/null
19
tar -xzf data.tar.gz -C "${srcdir}"
20
mkdir -p "${pkgdir}"/{usr/share/{applications,icons/hicolor/scalable/apps},opt/mcpelauncher-bin/{bin,share}}
21
cp -r "${srcdir}"/usr/share "${pkgdir}"/opt/mcpelauncher-bin
22
sed -i 's/libzip.so.4/libzip.so.5/' "${srcdir}"/usr/bin/*
23
install -Dm755 "${srcdir}"/usr/bin/* -t "${pkgdir}"/opt/mcpelauncher-bin/bin/
24
cp "${pkgdir}"/opt/mcpelauncher-bin/share/pixmaps/mcpelauncher-ui-qt.svg "${pkgdir}"/usr/share/icons/hicolor/scalable/apps/mcpelauncher-ui-qt.svg
25
cp "${pkgdir}"/opt/mcpelauncher-bin/share/applications/mcpelauncher-ui-qt.desktop "${pkgdir}"/usr/share/applications
26
}
27
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | MEDIUM | 2 |
| 2026-08-02 00:16:08 | MEDIUM | 2 |
| 2026-08-01 00:11:18 | MEDIUM | 2 |
| 2026-07-31 00:14:10 | MEDIUM | 3 |
| 2026-07-30 00:17:23 | MEDIUM | 3 |
| 2026-07-29 00:25:53 | MEDIUM | 3 |
| 2026-07-28 00:07:28 | MEDIUM | 3 |
| 2026-07-27 00:24:32 | MEDIUM | 3 |
| 2026-07-26 00:07:32 | MEDIUM | 3 |
| 2026-07-25 00:13:44 | MEDIUM | 3 |
| 2026-07-24 00:02:28 | MEDIUM | 3 |
| 2026-07-23 00:14:47 | MEDIUM | 3 |
| 2026-07-22 00:29:32 | MEDIUM | 3 |
| 2026-07-21 00:24:15 | MEDIUM | 3 |
| 2026-07-20 00:19:49 | MEDIUM | 3 |
| 2026-07-19 00:17:08 | MEDIUM | 3 |
| 2026-07-18 00:14:48 | MEDIUM | 3 |
| 2026-07-17 19:58:22 | MEDIUM | 3 |
| 2026-07-17 19:55:55 | MEDIUM | 3 |