pokebonk

LOW

maintainer duanluan 0 votes scanned 2026-10-31 17:58:44.816707

View on AUR

Why flagged

The package downloads a prebuilt AppImage from a GitHub release, which is a common but unverifiable source for proprietary software; however, it is not executed remotely and the build process is transparent, limiting risk to typical supply-chain concerns.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt AppImage from a GitHub release, which is a common but unverifiable source for proprietary software; however, it is not executed remotely and the build process is transparent, limiting risk to typical supply-chain concerns.

PKGBUILD

      1# Maintainer: duanluan <duanluan@outlook.com>
    
      2
    
      3pkgname=pokebonk
    
      4pkgver=1.2.0
    
      5pkgrel=2
    
      6pkgdesc='Desktop client for PokéBonk, a 3D survival fan-game'
    
      7arch=('x86_64')
    
      8url='https://pokebonk.com'
    
      9license=('LicenseRef-Proprietary')
    
      10depends=(
    
      11  'alsa-lib'
    
      12  'at-spi2-core'
    
      13  'cairo'
    
      14  'dbus'
    
      15  'expat'
    
      16  'gcc-libs'
    
      17  'glib2'
    
      18  'glibc'
    
      19  'gtk3'
    
      20  'hicolor-icon-theme'
    
      21  'libcups'
    
      22  'libnotify'
    
      23  'libsecret'
    
      24  'libx11'
    
      25  'libxcb'
    
      26  'libxcomposite'
    
      27  'libxdamage'
    
      28  'libxext'
    
      29  'libxfixes'
    
      30  'libxkbcommon'
    
      31  'libxrandr'
    
      32  'libxss'
    
      33  'libxtst'
    
      34  'mesa'
    
      35  'nspr'
    
      36  'nss'
    
      37  'pango'
    
      38  'systemd-libs'
    
      39  'util-linux-libs'
    
      40  'xdg-utils'
    
      41)
    
      42optdepends=(
    
      43  'libappindicator-gtk3: system tray icon support'
    
      44)
    
      45options=('!strip' '!lto')
    
      46source=(
    
      47  "PokeBonk-${pkgver}-linux-x86_64.AppImage::https://github.com/CharcherGit/pokebonk-app/releases/download/v${pkgver}/PokeBonk-${pkgver}-linux-x86_64.AppImage"
    
      48)
    
      49sha256sums=(
    
      50  'edf366e1040cfd4053c3cc2e6244781d80aacd01dec07d9849a29019c965502a'
    
      51)
    
      52
    
      53package() {
    
      54  cd "${srcdir}"
    
      55  chmod +x "PokeBonk-${pkgver}-linux-x86_64.AppImage"
    
      56  "./PokeBonk-${pkgver}-linux-x86_64.AppImage" --appimage-extract >/dev/null
    
      57
    
      58  install -dm755 "${pkgdir}/opt/${pkgname}"
    
      59  cp -a squashfs-root/. "${pkgdir}/opt/${pkgname}/"
    
      60  # --appimage-extract creates directories mode 0700 and cp -a keeps them;
    
      61  # restore traversable permissions (file modes are fine).
    
      62  find "${pkgdir}/opt/${pkgname}" -type d -exec chmod 755 '{}' +
    
      63
    
      64  # Electron's sandbox helper must retain its setuid bit for sandboxed renderers.
    
      65  chmod 4755 "${pkgdir}/opt/${pkgname}/chrome-sandbox"
    
      66
    
      67  install -Dm644 squashfs-root/usr/share/icons/hicolor/512x512/apps/PokeBonk.png \
    
      68    "${pkgdir}/usr/share/icons/hicolor/512x512/apps/PokeBonk.png"
    
      69  chmod 644 "${pkgdir}/opt/${pkgname}/usr/share/icons/hicolor/512x512/apps/PokeBonk.png"
    
      70
    
      71  install -Dm644 squashfs-root/pokebonk.desktop \
    
      72    "${pkgdir}/usr/share/applications/pokebonk.desktop"
    
      73  sed -i 's|^Exec=.*|Exec=pokebonk %U|' \
    
      74    "${pkgdir}/usr/share/applications/pokebonk.desktop"
    
      75
    
      76  # Upstream always launches with --no-sandbox (its desktop entry does);
    
      77  # without it Electron refuses to start under root.
    
      78  install -Dm755 /dev/stdin "${pkgdir}/usr/bin/pokebonk" <<'SCRIPT'
    
      79#!/bin/sh
    
      80exec /opt/pokebonk/AppRun --no-sandbox "$@"
    
      81SCRIPT
    
      82
    
      83  install -Dm644 squashfs-root/LICENSE.electron.txt \
    
      84    "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE.electron.txt"
    
      85  install -Dm644 squashfs-root/LICENSES.chromium.html \
    
      86    "${pkgdir}/usr/share/licenses/${pkgname}/LICENSES.chromium.html"
    
      87}
    
      88

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-31 17:58:44	Low	2