physicseditor

MEDIUM

maintainer asm0dey 2 votes scanned 2026-08-24 07:22:23.267746

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:20 source=("$pkgname-$pkgver.deb::https://www.codeandweb.com/download/$pkgname/$pkgver/PhysicsEditor-$pkgver.deb")

PKGBUILD

1 offending line(s) highlighted

      1# Contributor: Patrick Northon <northon_patrick3@yahoo.ca>
    
      2# Contributor: Wilson E. Alvarez <wilson.e.alvarez1@gmail.com>
    
      3# Contributor: Etzos <supercodingmonkey @ gmail.com>
    
      4# Contributor: Gordin <9ordin @t gmail dot com>
    
      5# Contributor: Geequlim <geequlim@gmail.com>
    
      6# Contributor: Antti Juhani Oja <antti.oja@gmail.com>
    
      7# Contributor: Pasha Finkelshteyn <me@asm0dey.site>
    
      8
    
      9pkgname=physicseditor
    
      10pkgver=2.0.5
    
      11pkgrel=1
    
      12pkgdesc="Physics editor for certain game engines such as Cocos2D-X, Corona SDK, etc."
    
      13arch=('x86_64')
    
      14url="http://www.codeandweb.com/$pkgname"
    
      15license=("custom:$pkgname")
    
      16install="$pkgname.install"
    
      17depends=('shared-mime-info' 'hicolor-icon-theme' 'desktop-file-utils' 'grantlee'
    
      18    'gcc-libs-multilib' 'qt5-svg' 'qt5-declarative' 'qt5-imageformats'
    
      19    'qt5-quickcontrols')
    
      20source=("$pkgname-$pkgver.deb::https://www.codeandweb.com/download/$pkgname/$pkgver/PhysicsEditor-$pkgver.deb")
    
      21sha256sums=('da3d712e628bf8b26c56e40b9877d1efcf6b67174371f91c9589ee07904a6039')
    
      22
    
      23build() {
    
      24    ar -x "$pkgname-$pkgver.deb"
    
      25}
    
      26
    
      27package() {
    
      28    cd ${srcdir}/
    
      29
    
      30    # Extract to the $pkgdir.
    
      31    tar xJf data.tar.xz -C "${pkgdir}/"
    
      32
    
      33    # Enter $pkgdir.
    
      34    cd ${pkgdir}/usr/lib/$pkgname/
    
      35
    
      36    # IMPORTANT NOTE: It looks like codeandweb stopped compiling with the -fPIC
    
      37    # flag. We must keep the bloat for now.
    
      38
    
      39    # Delete all the extra lib folders.
    
      40    #rm -rf generic/ grantlee/ iconengines/ imageformats/ platforminputcontexts/ platforms/ \
    
      41    #       QtGraphicalEffects/ QtQml/ QtQuick/ QtQuick.2/ xcbglintegrations/
    
      42
    
      43    # Delete the useless lib files.
    
      44    #rm -rf libGrantlee* libicudata* libicui18n* libicuuc* libQt5*
    
      45
    
      46    # Get rid of the Qt configuration that messes up LD_LIBRARY_PATH.
    
      47    #rm -rf qt.conf
    
      48
    
      49    install -Dm644 "${pkgdir}/usr/share/$pkgname/documents/LicenseAgreement.txt" \
    
      50        "${pkgdir}/usr/share/licenses/${pkgname}/LicenseAgreement.txt"
    
      51}
    
      52

Changes since previous scan

--- PKGBUILD @ 2026-06-20 16:03
+++ PKGBUILD @ 2026-08-24 07:22
@@ -6,9 +6,8 @@
 # Contributor: Antti Juhani Oja <antti.oja@gmail.com>
 # Contributor: Pasha Finkelshteyn <me@asm0dey.site>
 
-
 pkgname=physicseditor
-pkgver=2.0.0
+pkgver=2.0.5
 pkgrel=1
 pkgdesc="Physics editor for certain game engines such as Cocos2D-X, Corona SDK, etc."
 arch=('x86_64')
@@ -16,10 +15,10 @@
 license=("custom:$pkgname")
 install="$pkgname.install"
 depends=('shared-mime-info' 'hicolor-icon-theme' 'desktop-file-utils' 'grantlee'
-		 'gcc-libs-multilib' 'qt5-svg' 'qt5-declarative' 'qt5-imageformats'
-		 'qt5-quickcontrols')
+    'gcc-libs-multilib' 'qt5-svg' 'qt5-declarative' 'qt5-imageformats'
+    'qt5-quickcontrols')
 source=("$pkgname-$pkgver.deb::https://www.codeandweb.com/download/$pkgname/$pkgver/PhysicsEditor-$pkgver.deb")
-sha256sums=('8e5b389281cb59f859337c9e1b1ee504266fcad7a8e4609999fb207c6eb523ac')
+sha256sums=('da3d712e628bf8b26c56e40b9877d1efcf6b67174371f91c9589ee07904a6039')
 
 build() {
     ar -x "$pkgname-$pkgver.deb"
@@ -34,8 +33,8 @@
     # Enter $pkgdir.
     cd ${pkgdir}/usr/lib/$pkgname/
 
-	# IMPORTANT NOTE: It looks like codeandweb stopped compiling with the -fPIC
-	# flag. We must keep the bloat for now.
+    # IMPORTANT NOTE: It looks like codeandweb stopped compiling with the -fPIC
+    # flag. We must keep the bloat for now.
 
     # Delete all the extra lib folders.
     #rm -rf generic/ grantlee/ iconengines/ imageformats/ platforminputcontexts/ platforms/ \

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-24 07:22:23	Medium	1
2026-06-20 16:03:41	Clean	2
2026-06-20 00:50:07	Medium	2
2026-06-20 00:18:46	Medium	2
2026-06-19 23:51:18	Medium	2
2026-06-19 19:07:35	Low	2
2026-06-18 16:11:54	Medium	1