raptor-cos

LOW

maintainer ajacocks 0 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The package downloads game data files from archive.org, which is not a standard source host, but these are non-executable assets used by the game; the actual code is built from the project's GitHub repository, and there is no evidence of malicious intent or remote code execution.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads game data files from archive.org, which is not a standard source host, but these are non-executable assets used by the game; the actual code is built from the project's GitHub repository, and there is no evidence of malicious intent or remote code execution.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:23 "https://archive.org/download/RaptorCallOfTheShadows/1rap12.zip"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Alexander Jacocks <alexander@redhat.com>
    
      2pkgname=raptor-cos
    
      3_pkgname=raptor
    
      4pkgver=0.8.1
    
      5pkgrel=1
    
      6pkgdesc="Vertically-scrolling shoot 'em up from 1994"
    
      7arch=('x86_64')
    
      8url="https://github.com/skynettx/raptor"
    
      9license=('GPL2')
    
      10depends=(
    
      11  'alsa-lib'
    
      12  'fluidsynth'
    
      13  'hicolor-icon-theme'
    
      14  'sdl2'
    
      15  'soundfont-fluid'
    
      16  )
    
      17makedepends=(
    
      18  'cmake'
    
      19  'unzip'
    
      20  )
    
      21source=(
    
      22  ${pkgname}-${pkgver}.tgz::"${url}/archive/refs/tags/v${pkgver}.tar.gz"
    
      23  "https://archive.org/download/RaptorCallOfTheShadows/1rap12.zip"
    
      24  'raptor-cos.desktop'
    
      25  'raptor-cos.sh'
    
      26  )
    
      27sha256sums=('ef4a46d4cbad25ce19dab0d2ae86bc84f3c8dda6211bfbeeedb26d2d77578e0c'
    
      28            '7d6b062dcdc76d9ea02d8d71af14e5043223581d792f6ead4eb1316fd0351552'
    
      29            '1efd7607fb6a09f318699ac29bc07e2237a433cb7863c265c9a4913ee10e0e5f'
    
      30            'c3f99f4289e7723f662ad34c88577ac92bb5d15325847bbaf31558927ff9c7b8')
    
      31
    
      32build() {
    
      33  cmake -B build -S "$_pkgname-$pkgver" \
    
      34    -DCMAKE_BUILD_TYPE='None' \
    
      35    -DCMAKE_INSTALL_PREFIX='/usr' \
    
      36    -Wno-dev
    
      37  { test "$(nproc)" -gt 1 && cmake --build build -j"$(nproc)" ;} || cmake --build build }
    
      38}
    
      39
    
      40check() {
    
      41    ctest --test-dir build --output-on-failure
    
      42}
    
      43
    
      44package() {
    
      45  unzip -o 1rap12.zip RAPSW12.SHR
    
      46  unzip -o RAPSW12.SHR FILE0000.GLB FILE0001.GLB VENDOR.DOC
    
      47  sed -e "s/^Version=.*/Version=${pkgver}/" raptor-cos.desktop > raptor-cos.desktop.install
    
      48  install -Dm644 "$srcdir/raptor-cos.desktop.install" "${pkgdir}/usr/share/applications/${pkgname}.desktop"
    
      49  install -Dm644 "$srcdir/FILE0000.GLB" "$pkgdir"/usr/share/${pkgname}/FILE0000.GLB
    
      50  install -Dm644 "$srcdir/FILE0001.GLB" "$pkgdir"/usr/share/${pkgname}/FILE0001.GLB
    
      51  install -Dm644 "$srcdir/VENDOR.DOC" "$pkgdir"/usr/share/doc/${pkgname}/VENDOR.DOC
    
      52  install -Dm755 "$srcdir/${pkgname}.sh" "${pkgdir}/usr/bin/${pkgname}"
    
      53  ln -s /usr/share/soundfonts/FluidR3_GM.sf2 "$pkgdir"/usr/share/${pkgname}/SoundFont.sf2
    
      54  cd build/bin
    
      55  install -Dm755 "${_pkgname}" "$pkgdir"/usr/share/${pkgname}/${pkgname}
    
      56  cd ../../${_pkgname}-${pkgver}
    
      57  install -Dm644 'rsrc/raptor.png' "$pkgdir"/usr/share/icons/hicolor/256x256/apps/raptor-cos.png
    
      58  install -Dm644 'SETUP(MIDI).INI' "$pkgdir"/usr/share/${pkgname}/SETUP.INI
    
      59}
    
      60

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 00:29:17	Low	2