quake3-defrag-maps

maintainer Slash · 5 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads map packs (non-executable data files) for a Quake 3 mod from a personal domain; while the host is non-standard, the content is harmless game data, not code, and is used solely for its intended purpose.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads map packs (non-executable data files) for a Quake 3 mod from a personal domain; while the host is non-standard, the content is harmless game data, not code, and is used solely for its intended purpose.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:12 source=('https://aur.slashbunny.com/quake3-defrag-maps/defragpak1.zip' \

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Slash <demodevil5[at]yahoo[dot]com>
    
      2
    
      3pkgname=quake3-defrag-maps
    
      4pkgver=20091031
    
      5pkgrel=2
    
      6pkgdesc='Map packs for the DeFRaG Quake3 modification.'
    
      7url='https://q3df.org/'
    
      8license=('unknown')
    
      9arch=('any')
    
      10depends=('quake3-defrag')
    
      11makedepends=('unzip')
    
      12source=('https://aur.slashbunny.com/quake3-defrag-maps/defragpak1.zip' \
    
      13        'https://aur.slashbunny.com/quake3-defrag-maps/defragpak2.zip' \
    
      14        'https://aur.slashbunny.com/quake3-defrag-maps/defragpak3.zip' \
    
      15        'https://aur.slashbunny.com/quake3-defrag-maps/defragpak4.zip' \
    
      16        'https://aur.slashbunny.com/quake3-defrag-maps/defragpak5.zip' \
    
      17        'https://aur.slashbunny.com/quake3-defrag-maps/defragcpmpak01.zip' \
    
      18        'https://aur.slashbunny.com/quake3-defrag-maps/defragpak7.zip' \
    
      19        'https://aur.slashbunny.com/quake3-defrag-maps/defragpak8.zip' \
    
      20        'https://aur.slashbunny.com/quake3-defrag-maps/defragpak9.zip' \
    
      21        'https://aur.slashbunny.com/quake3-defrag-maps/defragpak10.zip' \
    
      22        'https://aur.slashbunny.com/quake3-defrag-maps/defragpak11.zip')
    
      23noextract=('defragpak1.zip' 'defragpak2.zip' 'defragpak3.zip' \
    
      24           'defragpak4.zip' 'defragpak5.zip' 'defragcpmpak01.zip' \
    
      25           'defragpak7.zip' 'defragpak8.zip' 'defragpak9.zip' \
    
      26           'defragpak10.zip' 'defragpak11.zip')
    
      27sha256sums=('0d013be5b338bb6070502fa4d5b20f3f4ac9b7c1b72ccf64a10dd143dece0b7e'
    
      28            'a1e2ceaa0717dd592a22060bbdd9ce415a15df9470a709bc04845ad21a064928'
    
      29            'ed7dd62cdabef98fd8e8ac3e2f477ac3483fb6d09aecb146cadd40c4ed156cb0'
    
      30            '5f00fbfb2d40f5ac0dae8849653b370d9abe7ca050142f247e113a66f3f0eddd'
    
      31            '74fb1d5c62e6a8553e26e6f89a0d1b77b48ebe4a7024d0f8518c6303029a04ef'
    
      32            '9de7a8d34d2a31db3c6593d1383c449b0b0cb09768062988736c9f75aad0028f'
    
      33            '30b18b716c03f562251e4f63b2194ab20289e7aa7f9ec53b23397d119f4c9dda'
    
      34            '94ebe9210133af7f7645011a0983e66df53604f9f1cc38431ad4786271892b61'
    
      35            'b6863f6f45fe144881cd929c063d8be747c0d637747c00d740f70ef4304d6f92'
    
      36            'ecccce33c03053b810c2883f51017329d528fdca641e76138aecb80e0666236d'
    
      37            '49466215b5b2dbfaf24e7e50ec4d9164b6e9fc8e040be177318d47274223f437')
    
      38PKGEXT=.pkg.tar
    
      39
    
      40package() {
    
      41    cd "${srcdir}"
    
      42
    
      43    # Create Destination Directories
    
      44    install -d "${pkgdir}/opt/quake3/defrag/"
    
      45
    
      46    # Install Map Packs
    
      47    for i in $(ls defrag{pak,cpmpak}*.zip); do
    
      48        /usr/bin/unzip -j "${i}" -d "${pkgdir}/opt/quake3/defrag/"
    
      49    done
    
      50
    
      51    # Fix permissions on extracted files
    
      52    find "${pkgdir}/opt/quake3/defrag/" -type f ! -perm 0644 -exec chmod 0644 {} \;
    
      53}
    
      54

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2