pokerogue-app-bin

LOW
maintainer hcgrandon 2 votes scanned 2026-11-01 00:21:48.120785
View on AUR
Why flagged

The package downloads a source zip from the project's official GitHub releases and a logo from the official pokerogue.net domain; both are verifiable and expected for building the package, with no evidence of malicious behavior.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a source zip from the project's official GitHub releases and a logo from the official pokerogue.net domain; both are verifiable and expected for building the package, with no evidence of malicious behavior.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:10 "https://pokerogue.net/logo512.png"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: HcgRandon <me@randon.moe>
2pkgname=pokerogue-app-bin
3pkgver=2.4.6e
4pkgrel=2
5pkgdesc="Admiral-Billy's Pokerogue App"
6arch=('x86_64')
7url="https://github.com/Admiral-Billy/Pokerogue-App"
8license=('MIT')
9source=("${pkgname}-${pkgver}.zip::https://github.com/Admiral-Billy/Pokerogue-App/releases/download/v${pkgver}/PokeRogue-Linux.zip"
10 "https://pokerogue.net/logo512.png"
11 "pokerogue.sh"
12 "pokerogue.desktop")
13noextract=("${pkgname}-${pkgver}.zip")
14sha256sums=('538f0692c57f65159e333470f0339855ca7f3132c67724934e2f2a3c25ed4207'
15 '7232f79a44cf8ed446807b679de09f3bdf03cc565cb4c10481abba4749331381'
16 '003155b0691d4222c72dc4d24f398b849690d073938cbd05e38ca0a9bd5ad83c'
17 '116c567e84c8a3cfa46fb6d0bad12e63d808a5d3056c6d66867707d200dba7c7')
18
19build() {
20 cd "$srcdir"
21 mkdir -p pokerogue
22 bsdtar -xf "${pkgname}-${pkgver}.zip" -C pokerogue
23}
24
25package() {
26 cd "$srcdir/pokerogue"
27
28 # Create the install directory
29 install -dm755 "$pkgdir/usr/share/pokerogue"
30
31 # Copy all files to the target directory
32 cp -r ./* "$pkgdir/usr/share/pokerogue/"
33
34 # Install launcher script
35 install -Dm755 "$srcdir/pokerogue.sh" "$pkgdir/usr/bin/pokerogue"
36
37 # Install the .desktop file
38 install -Dm644 "$srcdir/pokerogue.desktop" "$pkgdir/usr/share/applications/pokerogue.desktop"
39
40 # Install icon
41 install -Dm644 "$srcdir/logo512.png" "$pkgdir/usr/share/icons/hicolor/512x512/apps/pokerogue.png"
42}
43
44

Scan history

Scanned at (UTC)SeverityRules
2026-11-01 00:21:48 Low 2
2026-10-31 00:07:41 Low 2
2026-10-30 00:29:30 Low 2
2026-10-29 00:13:55 Low 2
2026-10-28 00:06:54 Low 2
2026-10-27 00:23:28 Low 2
2026-10-26 00:12:40 Low 2
2026-10-25 00:20:48 Low 2
2026-10-24 00:14:55 Low 2
2026-10-23 00:02:19 Low 2
2026-10-22 00:13:10 Low 2
2026-10-21 00:12:50 Low 2
2026-10-20 00:10:31 Low 2
2026-10-19 00:03:55 Low 2
2026-10-18 00:06:55 Low 2
2026-10-17 00:21:55 Low 2
2026-10-16 00:12:47 Low 2
2026-10-15 00:28:05 Low 2
2026-10-14 00:06:47 Low 2
2026-10-13 00:23:45 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion