pokemon-revolution-online-bin
maintainer fabiscafe
· 5 votes
· scanned 2026-08-03 00:08:14.047287
MEDIUM
View on AUR ↗
Why flagged
The package downloads a prebuilt binary (PROClient.x86_64) from ddl.pokemonrevolution.net, a non-standard and potentially swappable host, which could allow supply-chain attacks if the domain is compromised.
Triggered rules
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:28
"PROClient_linux-${__PROCLIENT_VER}.tar.gz::https://ddl.pokemonrevolution.net/PROClient_linux.tar.gz"
MEDIUM
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-07-25) reviewed this and agrees it is MEDIUM (confidence 90%): The package downloads a prebuilt binary (PROClient.x86_64) from ddl.pokemonrevolution.net, a non-standard and potentially swappable host, which could allow supply-chain attacks if the domain is compromised.
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Fabian Bornschein <fabiscafe@archlinux.org>
2
3
pkgname=pokemon-revolution-online-bin
4
__PROCLIENT_VER=20260501
5
pkgver=20260501+asset0.5
6
pkgrel=1
7
pkgdesc="A free-to-play, fan-made, MMO game that is predicated around the official Pokémon games."
8
options=('!strip')
9
arch=('x86_64')
10
url="https://pokemonrevolution.net"
11
license=('LicenseRef-Custom')
12
depends=(
13
bash
14
cairo
15
dbus
16
glib2
17
glibc
18
libdecor
19
libgcc
20
opengl-driver
21
pango
22
vulkan-driver
23
wayland
24
)
25
makedepends=('git')
26
source=(
27
"git+https://gitlab.com/fabiscafe/pro_assets_lin_desktop.git#tag=0.5"
28
"PROClient_linux-${__PROCLIENT_VER}.tar.gz::https://ddl.pokemonrevolution.net/PROClient_linux.tar.gz"
29
)
30
b2sums=('8d70ae01110e1b85e9206a7163d1d26414622940cd89d13d697b938d4087fa9b319c877fcbc424203a4767973194e58b38c311172909690bafe7015ec206b8ea'
31
'1a55ec5005abef2a06fc0853e04301597690db893fce4c00a06d2177a55bc876e559bdb4e7bab126cc275089dfbb95c961e2f4271a7ac8a271722bf6db7d598c')
32
33
pkgver() {
34
cd pro_assets_lin_desktop
35
printf "${__PROCLIENT_VER}+asset$(git describe --tags | sed 's/[^-]*-g/r&/;s/-/+/g')"
36
}
37
38
package() {
39
cd "PROClient"
40
# As of wishes from the license, don't touch the original, extracted files.
41
# Instead copy the structure and files 1:1 with better permissions.
42
# Everything outside of /opt/PROClient is provided by
43
# https://gitlab.com/fabiscafe/pro_assets_lin_desktop.git
44
45
# Folderstructure
46
/usr/bin/find . \
47
-type d \
48
-exec \
49
/usr/bin/install -dm755 "${pkgdir}/opt/PROClient/{}" \;
50
51
# Gamedata and binaries
52
/usr/bin/find . \
53
-type f \
54
! -name "PROClient.x86_64" \
55
-exec \
56
/usr/bin/install -m644 "{}" "${pkgdir}/opt/PROClient/{}" \;
57
58
/usr/bin/install -m755 "${srcdir}/PROClient/PROClient.x86_64" "${pkgdir}/opt/PROClient/PROClient.x86_64"
59
60
# Integration (by pro_assets_lin_desktop.git)
61
/usr/bin/install -D -m644 "${srcdir}/pro_assets_lin_desktop/net.pokemonrevolution.PROClient.svg" \
62
"${pkgdir}/usr/share/pixmaps/net.pokemonrevolution.PROClient.svg"
63
64
/usr/bin/install -D -m644 "${srcdir}/pro_assets_lin_desktop/net.pokemonrevolution.PROClient-symbolic.svg" \
65
"${pkgdir}/usr/share/pixmaps/net.pokemonrevolution.PROClient-symbolic.svg"
66
67
/usr/bin/install -D -m644 "${srcdir}/pro_assets_lin_desktop/net.pokemonrevolution.PROClient.desktop" \
68
"${pkgdir}/usr/share/applications/net.pokemonrevolution.PROClient.desktop"
69
70
/usr/bin/install -D -m755 "${srcdir}/pro_assets_lin_desktop/PROClient" \
71
"${pkgdir}/usr/bin/PROClient"
72
73
/usr/bin/install -D -m644 "${srcdir}/pro_assets_lin_desktop/pkg_copyright" \
74
"${pkgdir}/usr/share/licenses/pokemon-revolution-online-bin/copyright"
75
}
76
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | MEDIUM | 2 |
| 2026-08-02 00:16:08 | MEDIUM | 2 |
| 2026-08-01 00:11:18 | MEDIUM | 2 |
| 2026-07-31 00:14:10 | MEDIUM | 2 |
| 2026-07-30 00:17:23 | MEDIUM | 2 |
| 2026-07-29 00:25:53 | MEDIUM | 2 |
| 2026-07-28 00:07:28 | MEDIUM | 2 |
| 2026-07-27 00:24:32 | MEDIUM | 2 |
| 2026-07-26 00:07:32 | MEDIUM | 2 |
| 2026-07-25 00:13:44 | MEDIUM | 2 |
| 2026-07-24 00:02:28 | MEDIUM | 2 |
| 2026-07-23 00:14:47 | MEDIUM | 2 |
| 2026-07-22 00:29:32 | MEDIUM | 2 |
| 2026-07-21 00:24:15 | MEDIUM | 2 |
| 2026-07-20 00:19:49 | MEDIUM | 2 |
| 2026-07-19 00:17:08 | MEDIUM | 2 |
| 2026-07-18 00:14:48 | MEDIUM | 2 |
| 2026-07-17 00:06:16 | MEDIUM | 2 |
| 2026-07-16 00:05:41 | MEDIUM | 2 |
| 2026-07-15 00:09:25 | MEDIUM | 2 |