pokemon-revolution-online-bin
LOW
maintainer fabiscafe
5 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads a prebuilt client from the project's official domain (ddl.pokemonrevolution.net), which is plausibly controlled by the project; the source is not from a swappable or untrusted host, and the checksum is provided, making the risk low despite the non-whitelisted domain.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt client from the project's official domain (ddl.pokemonrevolution.net), which is plausibly controlled by the project; the source is not from a swappable or untrusted host, and the checksum is provided, making the risk low despite the non-whitelisted domain.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:28
"PROClient_linux-${__PROCLIENT_VER}.tar.gz::https://ddl.pokemonrevolution.net/PROClient_linux.tar.gz"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Fabian Bornschein <fabiscafe@archlinux.org>
2
3
pkgname=pokemon-revolution-online-bin
4
__PROCLIENT_VER=20260817
5
pkgver=20260817+asset0.5
6
pkgrel=1
7
pkgdesc="A free-to-play, fan-made, MMO game that is predicated around the official Pokémon games."
8
options=('!strip')
9
arch=('x86_64')
10
url="https://pokemonrevolution.net"
11
license=('LicenseRef-Custom')
12
depends=(
13
bash
14
cairo
15
dbus
16
glib2
17
glibc
18
libdecor
19
libgcc
20
opengl-driver
21
pango
22
vulkan-driver
23
wayland
24
)
25
makedepends=('git')
26
source=(
27
"git+https://gitlab.com/fabiscafe/pro_assets_lin_desktop.git#tag=0.5"
28
"PROClient_linux-${__PROCLIENT_VER}.tar.gz::https://ddl.pokemonrevolution.net/PROClient_linux.tar.gz"
29
)
30
b2sums=('8d70ae01110e1b85e9206a7163d1d26414622940cd89d13d697b938d4087fa9b319c877fcbc424203a4767973194e58b38c311172909690bafe7015ec206b8ea'
31
'31a61d19090c0b77a81ac296f7ec2ead4df4ca20f2aececb3cd505c0eac990417dedac27012744a09ef35f03d817702e4d74916670c68e2b340c791802dcd65c')
32
33
pkgver() {
34
cd pro_assets_lin_desktop
35
printf "${__PROCLIENT_VER}+asset$(git describe --tags | sed 's/[^-]*-g/r&/;s/-/+/g')"
36
}
37
38
package() {
39
cd "PROClient"
40
# As of wishes from the license, don't touch the original, extracted files.
41
# Instead copy the structure and files 1:1 with better permissions.
42
# Everything outside of /opt/PROClient is provided by
43
# https://gitlab.com/fabiscafe/pro_assets_lin_desktop.git
44
45
# Folderstructure
46
/usr/bin/find . \
47
-type d \
48
-exec \
49
/usr/bin/install -dm755 "${pkgdir}/opt/PROClient/{}" \;
50
51
# Gamedata and binaries
52
/usr/bin/find . \
53
-type f \
54
! -name "PROClient.x86_64" \
55
-exec \
56
/usr/bin/install -m644 "{}" "${pkgdir}/opt/PROClient/{}" \;
57
58
/usr/bin/install -m755 "${srcdir}/PROClient/PROClient.x86_64" "${pkgdir}/opt/PROClient/PROClient.x86_64"
59
60
# Integration (by pro_assets_lin_desktop.git)
61
/usr/bin/install -D -m644 "${srcdir}/pro_assets_lin_desktop/net.pokemonrevolution.PROClient.svg" \
62
"${pkgdir}/usr/share/pixmaps/net.pokemonrevolution.PROClient.svg"
63
64
/usr/bin/install -D -m644 "${srcdir}/pro_assets_lin_desktop/net.pokemonrevolution.PROClient-symbolic.svg" \
65
"${pkgdir}/usr/share/pixmaps/net.pokemonrevolution.PROClient-symbolic.svg"
66
67
/usr/bin/install -D -m644 "${srcdir}/pro_assets_lin_desktop/net.pokemonrevolution.PROClient.desktop" \
68
"${pkgdir}/usr/share/applications/net.pokemonrevolution.PROClient.desktop"
69
70
/usr/bin/install -D -m755 "${srcdir}/pro_assets_lin_desktop/PROClient" \
71
"${pkgdir}/usr/bin/PROClient"
72
73
/usr/bin/install -D -m644 "${srcdir}/pro_assets_lin_desktop/pkg_copyright" \
74
"${pkgdir}/usr/share/licenses/pokemon-revolution-online-bin/copyright"
75
}
76
Changes since previous scan
--- PKGBUILD @ 2026-09-05 00:16+++ PKGBUILD @ 2026-09-17 00:27@@ -1,8 +1,8 @@ # Maintainer: Fabian Bornschein <fabiscafe@archlinux.org> pkgname=pokemon-revolution-online-bin-__PROCLIENT_VER=20260501-pkgver=20260501+asset0.5+__PROCLIENT_VER=20260817+pkgver=20260817+asset0.5 pkgrel=1 pkgdesc="A free-to-play, fan-made, MMO game that is predicated around the official Pokémon games." options=('!strip')@@ -28,7 +28,7 @@ "PROClient_linux-${__PROCLIENT_VER}.tar.gz::https://ddl.pokemonrevolution.net/PROClient_linux.tar.gz" ) b2sums=('8d70ae01110e1b85e9206a7163d1d26414622940cd89d13d697b938d4087fa9b319c877fcbc424203a4767973194e58b38c311172909690bafe7015ec206b8ea'- '1a55ec5005abef2a06fc0853e04301597690db893fce4c00a06d2177a55bc876e559bdb4e7bab126cc275089dfbb95c961e2f4271a7ac8a271722bf6db7d598c')+ '31a61d19090c0b77a81ac296f7ec2ead4df4ca20f2aececb3cd505c0eac990417dedac27012744a09ef35f03d817702e4d74916670c68e2b340c791802dcd65c') pkgver() { cd pro_assets_lin_desktopScan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 16:00:23 | Medium | 1 |
| 2026-09-05 00:16:27 | Medium | 2 |
| 2026-09-04 00:03:13 | Medium | 2 |
| 2026-09-03 00:15:47 | Medium | 2 |
| 2026-09-02 00:02:31 | Medium | 2 |
| 2026-09-01 00:11:19 | Medium | 2 |
| 2026-08-31 00:19:57 | Medium | 2 |
| 2026-08-30 00:04:14 | Medium | 2 |