pokemon-revolution-online-bin
LOW
maintainer fabiscafe
5 votes
scanned 2026-11-01 00:21:48.120785
Why flagged
The package downloads a prebuilt client from the project's official domain (ddl.pokemonrevolution.net), which is plausibly controlled by the project; the source is not from a swappable or untrusted host, and the checksum is provided, making the risk low despite the non-whitelisted domain.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt client from the project's official domain (ddl.pokemonrevolution.net), which is plausibly controlled by the project; the source is not from a swappable or untrusted host, and the checksum is provided, making the risk low despite the non-whitelisted domain.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:28
"PROClient_linux-${__PROCLIENT_VER}.tar.gz::https://ddl.pokemonrevolution.net/PROClient_linux.tar.gz"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Fabian Bornschein <fabiscafe@archlinux.org>
2
3
pkgname=pokemon-revolution-online-bin
4
__PROCLIENT_VER=20260817
5
pkgver=20260817+asset0.5
6
pkgrel=1
7
pkgdesc="A free-to-play, fan-made, MMO game that is predicated around the official Pokémon games."
8
options=('!strip')
9
arch=('x86_64')
10
url="https://pokemonrevolution.net"
11
license=('LicenseRef-Custom')
12
depends=(
13
bash
14
cairo
15
dbus
16
glib2
17
glibc
18
libdecor
19
libgcc
20
opengl-driver
21
pango
22
vulkan-driver
23
wayland
24
)
25
makedepends=('git')
26
source=(
27
"git+https://gitlab.com/fabiscafe/pro_assets_lin_desktop.git#tag=0.5"
28
"PROClient_linux-${__PROCLIENT_VER}.tar.gz::https://ddl.pokemonrevolution.net/PROClient_linux.tar.gz"
29
)
30
b2sums=('8d70ae01110e1b85e9206a7163d1d26414622940cd89d13d697b938d4087fa9b319c877fcbc424203a4767973194e58b38c311172909690bafe7015ec206b8ea'
31
'31a61d19090c0b77a81ac296f7ec2ead4df4ca20f2aececb3cd505c0eac990417dedac27012744a09ef35f03d817702e4d74916670c68e2b340c791802dcd65c')
32
33
pkgver() {
34
cd pro_assets_lin_desktop
35
printf "${__PROCLIENT_VER}+asset$(git describe --tags | sed 's/[^-]*-g/r&/;s/-/+/g')"
36
}
37
38
package() {
39
cd "PROClient"
40
# As of wishes from the license, don't touch the original, extracted files.
41
# Instead copy the structure and files 1:1 with better permissions.
42
# Everything outside of /opt/PROClient is provided by
43
# https://gitlab.com/fabiscafe/pro_assets_lin_desktop.git
44
45
# Folderstructure
46
/usr/bin/find . \
47
-type d \
48
-exec \
49
/usr/bin/install -dm755 "${pkgdir}/opt/PROClient/{}" \;
50
51
# Gamedata and binaries
52
/usr/bin/find . \
53
-type f \
54
! -name "PROClient.x86_64" \
55
-exec \
56
/usr/bin/install -m644 "{}" "${pkgdir}/opt/PROClient/{}" \;
57
58
/usr/bin/install -m755 "${srcdir}/PROClient/PROClient.x86_64" "${pkgdir}/opt/PROClient/PROClient.x86_64"
59
60
# Integration (by pro_assets_lin_desktop.git)
61
/usr/bin/install -D -m644 "${srcdir}/pro_assets_lin_desktop/net.pokemonrevolution.PROClient.svg" \
62
"${pkgdir}/usr/share/pixmaps/net.pokemonrevolution.PROClient.svg"
63
64
/usr/bin/install -D -m644 "${srcdir}/pro_assets_lin_desktop/net.pokemonrevolution.PROClient-symbolic.svg" \
65
"${pkgdir}/usr/share/pixmaps/net.pokemonrevolution.PROClient-symbolic.svg"
66
67
/usr/bin/install -D -m644 "${srcdir}/pro_assets_lin_desktop/net.pokemonrevolution.PROClient.desktop" \
68
"${pkgdir}/usr/share/applications/net.pokemonrevolution.PROClient.desktop"
69
70
/usr/bin/install -D -m755 "${srcdir}/pro_assets_lin_desktop/PROClient" \
71
"${pkgdir}/usr/bin/PROClient"
72
73
/usr/bin/install -D -m644 "${srcdir}/pro_assets_lin_desktop/pkg_copyright" \
74
"${pkgdir}/usr/share/licenses/pokemon-revolution-online-bin/copyright"
75
}
76
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |