rickyd

LOW
maintainer tippfehlr 1 votes scanned 2026-08-26 00:12:07.713121
View on AUR
Why flagged

The package builds from source hosted on SourceForge, a common but non-whitelisted forge; however, it is the project's own source, checksummed and not executed remotely, posing low risk despite the orphaned/re-adopted flag.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from source hosted on SourceForge, a common but non-whitelisted forge; however, it is the project's own source, checksummed and not executed remotely, posing low risk despite the orphaned/re-adopted flag.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

1# Maintainer: megadriver <megadriver at gmx dot com>
2
3pkgname=rickyd
4pkgver=0.2.0
5pkgrel=1
6pkgdesc="An easily moddable clone of Rick Dangerous"
7arch=('i686' 'x86_64')
8url="http://sourceforge.net/projects/rickyd/"
9license=("GPL3")
10depends=('sdl2_image' 'sdl2_mixer' 'sdl2_ttf')
11source=(http://downloads.sourceforge.net/sourceforge/$pkgname/$pkgname-src-$pkgver.tar.gz)
12md5sums=('3775f51ad19c81602d8c211c838ee69a')
13
14build() {
15 cd $srcdir/$pkgname-src-$pkgver
16 ./bootstrap.sh
17 make distclean
18 ./configure --prefix=/usr
19 make
20}
21
22package() {
23 cd $srcdir/$pkgname-src-$pkgver
24 make DESTDIR=$pkgdir install
25}
26

Scan history

Scanned at (UTC)SeverityRules
2026-08-26 00:12:07 Low 2
2026-08-25 23:28:42 Medium 1
2026-06-18 16:11:54 Clean 0

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion