proton-cachyos-native

LOW
maintainer loathingkernel 13 votes scanned 2026-11-01 00:21:48.120785
View on AUR
Why flagged

The package builds from a legitimate project-owned GitHub repository and includes additional components from trusted upstream sources; the non-standard host flag is a false positive as all sources are from official project forges or well-known domains.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from a legitimate project-owned GitHub repository and includes additional components from trusted upstream sources; the non-standard host flag is a false positive as all sources are from official project forges or well-known domains.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:18 https://dl.winehq.org/wine/wine-gecko/${_geckover}/wine-gecko-${_geckover}-x86{,_64}.tar.xz

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Peter Jung ptr1337 <admin@ptr1337.dev>
2# Maintainer: loathingkernel <loathingkernel _a_ gmail _d_ com>
3
4pkgname=proton-cachyos-native
5_srctag=11.0-20261015
6_commit=
7pkgver=${_srctag//-/.}
8_geckover=2.47.4
9_monover=11.3.0
10_xaliaver=0.5.0
11_zludaver=v7-preview.15
12_zludasha=86ec0a9
13pkgrel=1
14epoch=1
15
16source=(
17 proton-cachyos::git+https://github.com/CachyOS/proton-cachyos.git#tag=cachyos-${_srctag}-native
18 https://dl.winehq.org/wine/wine-gecko/${_geckover}/wine-gecko-${_geckover}-x86{,_64}.tar.xz
19 https://github.com/madewokherd/wine-mono/releases/download/wine-mono-${_monover}/wine-mono-${_monover}-x86.tar.xz
20 https://github.com/madewokherd/xalia/releases/download/xalia-${_xaliaver}/xalia-${_xaliaver}-net48-mono.zip
21 https://github.com/vosen/ZLUDA/releases/download/${_zludaver}/zluda-windows-${_zludasha}.zip
22 compatibilitytool.vdf.template
23 ntsync.conf
24)
25noextract=(
26 wine-gecko-${_geckover}-{x86,x86_64}.tar.xz
27 wine-mono-${_monover}-x86.tar.xz
28 xalia-${_xaliaver}-net48-mono.zip
29)
30
31pkgdesc="A compatibility tool for Steam Play based on Wine and additional components, experimental branch with extra CachyOS flavour (native build)"
32url="https://github.com/CachyOS/proton-cachyos"
33arch=(x86_64 x86_64_v3)
34options=(!staticlibs !lto !debug emptydirs pestrip)
35license=('custom')
36depends=(
37 attr
38# blas
39 cabextract
40 desktop-file-utils
41 fontconfig
42 flac
43 freetype2
44 libgcc
45 gettext
46 glib2
47 glibc
48# lapack
49 libgudev
50 libnsl
51 libpcap
52 libunwind
53 libvpx
54 libwebp
55 libx11
56 libxcursor
57 libxext
58 libxkbcommon
59 libxml2
60 libxi
61 libxrandr
62 mpg123
63 pipewire
64 python
65 python-six
66 rtkit
67 speex
68 speexdsp
69# Start of old steam-native-runtime
70 atk
71 cairo
72 curl
73 dbus-glib
74 freeglut
75 gdk-pixbuf2
76 glu
77 lcms2
78 libcaca
79 libcanberra
80 dbus
81 libdrm
82 libice
83 libibus
84 libnm
85 libusb
86 libvdpau
87 libvorbis
88 libxft
89 libxmu
90 libxrender
91 libxtst
92 nspr
93 openal
94 pango
95 sdl2-compat
96 pipewire
97 librsvg
98 libsm
99 libtheora
100 vulkan-driver
101# End of old steam-native-runtime
102 unzip
103 wayland
104 xz
105)
106makedepends=(
107 afdko
108 alsa-lib
109 clang
110 cmake
111 ffmpeg
112 fontforge
113 giflib
114 git
115 glib2-devel
116 glslang
117 gnutls
118 gtk3
119 libgphoto2
120 libpulse
121 libva
122 libxcomposite
123 libxinerama
124 libxxf86vm
125 lld
126 mesa
127 mesa-libgl
128 meson
129 mingw-w64-gcc
130 mingw-w64-tools
131 nasm
132 opencl-headers
133 opencl-icd-loader
134 pcsclite
135 perl
136 perl-json
137 rsync
138 rust
139 python-pefile
140 python-setuptools-scm
141 samba
142 unixodbc
143 v4l-utils
144 vulkan-headers
145 vulkan-icd-loader
146 wayland-protocols
147 wget
148 xorg-util-macros
149)
150optdepends=(
151 alsa-lib
152 alsa-plugins
153 ffmpeg
154 gnutls
155 gtk3
156 libgphoto2
157 libpulse
158 libva
159 libxcomposite
160 libxinerama
161 opencl-icd-loader
162 pcsclite
163 samba
164 steam
165 umu-launcher
166 unixodbc
167 v4l-utils
168 vulkan-icd-loader
169)
170optdepends+=(
171 NTSYNC-MODULE
172)
173provides=('proton-cachyos' 'proton')
174replaces=('proton-cachyos')
175backup=(
176 "usr/share/steam/compatibilitytools.d/${pkgname}/user_settings.py"
177)
178install=${pkgname}.install
179
180_make_wrappers () {
181 # _arch prefix gcc ld as strip
182 local _i686=( "i686" "-m32" "-melf_i386" "--32" "elf32-i386")
183 local _x86_64=("x86_64" "-m64" "-melf_x86_64" "--64" "elf64-x86-64")
184 local _opts=(_i686 _x86_64)
185 declare -n _opt
186 for _opt in "${_opts[@]}"; do
187 for l in ar ranlib nm; do
188 ln -s /usr/bin/gcc-$l wrappers/${_opt[0]}-pc-linux-gnu-$l
189 done
190 for t in gcc g++; do
191 install -Dm755 /dev/stdin wrappers/${_opt[0]}-pc-linux-gnu-$t <<EOF
192#!/usr/bin/bash
193$(which ccache 2> /dev/null) /usr/bin/$t ${_opt[1]} "\$@"
194EOF
195 done
196 install -Dm755 /dev/stdin wrappers/${_opt[0]}-pc-linux-gnu-ld <<EOF
197#!/usr/bin/bash
198/usr/bin/ld ${_opt[2]} "\$@"
199EOF
200 install -Dm755 /dev/stdin wrappers/${_opt[0]}-pc-linux-gnu-as <<EOF
201#!/usr/bin/bash
202/usr/bin/as ${_opt[3]} "\$@"
203EOF
204 install -Dm755 /dev/stdin wrappers/${_opt[0]}-pc-linux-gnu-strip <<EOF
205#!/usr/bin/bash
206/usr/bin/strip -F ${_opt[4]} "\$@"
207EOF
208 done
209}
210
211prepare() {
212 # Provide wrappers to compiler tools
213 rm -rf wrappers && mkdir wrappers
214 _make_wrappers
215
216 [ ! -d build ] && mkdir build
217
218 cd proton-cachyos
219
220 [ ! -d contrib ] && mkdir -p contrib
221 mv "$srcdir"/wine-gecko-${_geckover}-x86{,_64}.tar.xz contrib/
222 mv "$srcdir"/wine-mono-${_monover}-x86.tar.xz contrib/
223 mv "$srcdir"/xalia-${_xaliaver}-net48-mono.zip contrib/
224 mv "$srcdir"/zluda-windows-${_zludasha}.zip contrib/
225
226 _submodules=(
227 OpenXR-SDK
228 SPIRV-Headers
229 Vulkan-Headers
230 dav1d
231 dxvk
232 dxvk-igdext
233 dxvk-nvapi
234 extras/d7vk
235 extras/discord-rpc-bridge
236 extras/dxvk-low-latency
237 extras/vkd3d-low-latency
238 extras/dxvk-sarek
239 ffmpeg
240 fonts/liberation-fonts
241 glslang
242 graphene
243 gst-orc
244 gst-plugins-rs
245 gstreamer
246 libsoup
247 meson
248 nvidia-libs/nvcuda
249 nvidia-libs/nvcuda32
250 nvidia-libs/nvenc
251 nvidia-libs/nvenc32
252 nvidia-libs/wine-nvml
253 nvidia-libs/wine-nvoptix
254 openvr
255 protonfixes
256 vkd3d
257 vkd3d-proton
258 vklayers/Vulkan-Utility-Libraries
259 vklayers/low_latency_layer
260 vklayers/pyroveil
261 vklayers/vkbasalt
262 wine
263 )
264
265 # Explicitly set origin URL for submodules using relative paths
266 git remote set-url origin https://github.com/CachyOS/proton-cachyos.git
267 git submodule update --init --filter=tree:0 --recursive ${_submodules[@]}
268
269 for rustlib in gst-plugins-rs; do
270 pushd $rustlib
271 export RUSTUP_TOOLCHAIN=stable
272 export CARGO_HOME="${SRCDEST}"/proton-cargo
273 export CARGO_NET_GIT_FETCH_WITH_CLI=true
274 cargo fetch --locked --target x86_64-unknown-linux-gnu
275 popd
276 done
277}
278
279build() {
280 export PATH="$(pwd)/wrappers:$PATH"
281
282 local -a split=($CFLAGS)
283 local -A flags
284 for opt in "${split[@]}"; do flags["${opt%%=*}"]="${opt##*=}"; done
285 local march="${flags["-march"]:-nocona}"
286 local mtune="${flags["-mtune"]:-core-avx2}"
287
288 CFLAGS="-O2 -march=${march} -mtune=${mtune}"
289 CXXFLAGS="-O2 -march=${march} -mtune=${mtune}"
290 RUSTFLAGS="-C opt-level=3 -C target-cpu=${march}"
291 LDFLAGS="-Wl,-O1,--sort-common,--as-needed"
292
293 export CFLAGS CXXFLAGS RUSTFLAGS LDFLAGS
294
295 export RUSTUP_TOOLCHAIN=stable
296 export CARGO_HOME="${SRCDEST}"/proton-cargo
297
298 cd build
299 ROOTLESS_CONTAINER="" \
300 ../proton-cachyos/configure.sh \
301 --container-engine="none" \
302 --proton-sdk-image="" \
303 --build-name="${pkgname}" \
304 --enable-wow64 \
305 --without-steamrt-depends \
306 --without-tts
307
308 SUBJOBS=$([[ "$MAKEFLAGS" =~ -j\ *([1-9][0-9]*) ]] && echo "${BASH_REMATCH[1]}" || echo "$(nproc)") \
309 make -j1 dist
310
311 cd dist
312 sed -r \
313 -e "s|##INSTALL_PATH##|.|" \
314 -e "s|##DISPLAY_NAME##|proton-cachyos-${_srctag} (native)|" \
315 -e "s|##INTERNAL_TOOL_NAME##|${pkgname}|" \
316 "${srcdir}/compatibilitytool.vdf.template" > compatibilitytool.vdf
317}
318
319package() {
320 cd build
321
322 # Delete the intermediate build directories to free space (mostly for my github actions)
323 rm -rf dst-* obj-* src-* pfx-*
324
325 local _compatdir="${pkgdir}/usr/share/steam/compatibilitytools.d"
326 mkdir -p "${_compatdir}/${pkgname}"
327 rsync --delete -arx dist/* "${_compatdir}/${pkgname}"
328
329 mkdir -p "${pkgdir}/usr/share/licenses/${pkgname}"
330 mv "${_compatdir}/${pkgname}"/{PATENTS.AV1,LICENSE{,.OFL}} \
331 "${pkgdir}/usr/share/licenses/${pkgname}"
332
333 # Load ntsync module
334 install -Dm644 "$srcdir/ntsync.conf" "$pkgdir/usr/lib/modules-load.d/10-$pkgname.conf"
335
336 cd "${_compatdir}/${pkgname}/files"
337
338 local _geckodir="share/wine/gecko/wine-gecko-${_geckover}"
339 i686-w64-mingw32-strip --strip-debug \
340 $(find "${_geckodir}"-x86 -iname "*.dll" -or -iname "*.exe")
341 x86_64-w64-mingw32-strip --strip-debug \
342 $(find "${_geckodir}"-x86_64 -iname "*.dll" -or -iname "*.exe")
343
344 local _monodir="share/wine/mono/wine-mono-${_monover}"
345 i686-w64-mingw32-strip --strip-debug \
346 $(find "${_monodir}"/lib/mono -iname "*.dll" -or -iname "*.exe")
347 i686-w64-mingw32-strip --strip-debug \
348 "${_monodir}"/lib/x86/*.dll \
349 $(find "${_monodir}" -iname "*x86.dll" -or -iname "*x86.exe")
350 x86_64-w64-mingw32-strip --strip-debug \
351 "${_monodir}"/lib/x86_64/*.dll \
352 $(find "${_monodir}" -iname "*x86_64.dll" -or -iname "*x86_64.exe")
353}
354
355b2sums=('d55b53d0c81283038fadc4074ca590f0bc7dfbfd458a58589dbeda11c07dac58171fc403ca8611af0ad2b9f4f39bb064902970a1ca6065b865eaef214738db08'
356 '2a73c12585b502ae11188482cbc9fb1f45f95bfe4383a7615011104b132f4845f9813d01fb40277e1934fab5f1b35ab40b4f4a66a9967463dd1d666a666904e9'
357 '62856a88266b4757602c0646e024f832974a93f03b9df253fd4895d4f11a41b435840ad8f7003ec85a0d8087dec15f2e096dbfb4b01ebe4d365521e48fd0c5c0'
358 '230b9094049fc8b0c5600c44ad9514541f4bb21a75a0fd32e5025aa4c267f3b1d0032929d215688ed8ebe6c1b3ade93e3643272305f6f81b734d376cdea257c2'
359 '3b1d5d974ae32849b8e74828b1a00475183bdb5a345e16699dbf88306787c95b3ab2f2ea6f53a19a074ac6e26f6f77c29edc2cbe24dce301522245112c5e1002'
360 'e0f5d428d0080c98ee9d68119ab5033b0b098f1709f5105c2e08106a5207c5f3d3f50a618e855d6d5fb89f2be5f2e8263c60a6b19cd80f3c6b201300b15e87b5'
361 'f0a81d83e644ca074a6bf54fc74ae12f5bd047e29d87fab528fba20e4b8d013547ad4b26e912c2b3218a75114f5c76b64aa84fdbc3054d3a1d9bf96635c6212b'
362 '964a3ba277821e570aec2127f0d1ae9898da6976c360deb6b196345a50bd3c2c55cb399527507006d8fddef868069032a30b083f23987d5050f185c74dd9de35')
363

Changes since previous scan

--- PKGBUILD @ 2026-10-21 00:12
+++ PKGBUILD @ 2026-11-01 00:21
@@ -2,7 +2,7 @@
# Maintainer: loathingkernel <loathingkernel _a_ gmail _d_ com>
pkgname=proton-cachyos-native
-_srctag=11.0-20261014
+_srctag=11.0-20261015
_commit=
pkgver=${_srctag//-/.}
_geckover=2.47.4
@@ -10,7 +10,7 @@
_xaliaver=0.5.0
_zludaver=v7-preview.15
_zludasha=86ec0a9
-pkgrel=2
+pkgrel=1
epoch=1
source=(
@@ -352,7 +352,7 @@
$(find "${_monodir}" -iname "*x86_64.dll" -or -iname "*x86_64.exe")
}
-b2sums=('643b5396241257181c74afdaeb229f995fa43c76af837bb310785bc43fec60d305bb2757775ebfe87dbf078148a1f6fcf6a6595f1221d29d9a7594bb65c35236'
+b2sums=('d55b53d0c81283038fadc4074ca590f0bc7dfbfd458a58589dbeda11c07dac58171fc403ca8611af0ad2b9f4f39bb064902970a1ca6065b865eaef214738db08'
'2a73c12585b502ae11188482cbc9fb1f45f95bfe4383a7615011104b132f4845f9813d01fb40277e1934fab5f1b35ab40b4f4a66a9967463dd1d666a666904e9'
'62856a88266b4757602c0646e024f832974a93f03b9df253fd4895d4f11a41b435840ad8f7003ec85a0d8087dec15f2e096dbfb4b01ebe4d365521e48fd0c5c0'
'230b9094049fc8b0c5600c44ad9514541f4bb21a75a0fd32e5025aa4c267f3b1d0032929d215688ed8ebe6c1b3ade93e3643272305f6f81b734d376cdea257c2'

Scan history

Scanned at (UTC)SeverityRules
2026-11-01 00:21:48 Low 2
2026-10-31 00:07:41 Low 2
2026-10-30 00:29:30 Low 2
2026-10-29 00:13:55 Low 2
2026-10-28 00:06:54 Low 2
2026-10-27 00:23:28 Low 2
2026-10-26 00:12:40 Low 2
2026-10-25 00:20:48 Low 2
2026-10-24 00:14:55 Low 2
2026-10-23 00:02:19 Low 2
2026-10-22 00:13:10 Low 2
2026-10-21 01:29:42 Medium 1
2026-10-21 00:12:50 Low 2
2026-10-20 00:10:31 Low 2
2026-10-19 00:03:55 Low 2
2026-10-18 01:20:44 Medium 1
2026-10-18 00:06:55 Low 2
2026-10-17 00:21:55 Low 2
2026-10-16 00:12:47 Low 2
2026-10-15 00:28:05 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion