rickyd
The package builds from source hosted on SourceForge, a common but non-whitelisted forge; however, it is the project's own source, checksummed and not executed remotely, posing low risk despite the orphaned/re-adopted flag.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from source hosted on SourceForge, a common but non-whitelisted forge; however, it is the project's own source, checksummed and not executed remotely, posing low risk despite the orphaned/re-adopted flag.
1 higher static finding superseded - not the current verdict (shown for transparency)
orphaned_readopted
This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.
PKGBUILD
# Maintainer: megadriver <megadriver at gmx dot com>
pkgname=rickyd
pkgver=0.2.0
pkgrel=1
pkgdesc="An easily moddable clone of Rick Dangerous"
arch=('i686' 'x86_64')
url="http://sourceforge.net/projects/rickyd/"
license=("GPL3")
depends=('sdl2_image' 'sdl2_mixer' 'sdl2_ttf')
source=(http://downloads.sourceforge.net/sourceforge/$pkgname/$pkgname-src-$pkgver.tar.gz)
md5sums=('3775f51ad19c81602d8c211c838ee69a')
build() {
cd $srcdir/$pkgname-src-$pkgver
./bootstrap.sh
make distclean
./configure --prefix=/usr
make
}
package() {
cd $srcdir/$pkgname-src-$pkgver
make DESTDIR=$pkgdir install
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-26 00:12:07 | Low | 2 |
| 2026-08-25 23:28:42 | Medium | 1 |
| 2026-06-18 16:11:54 | Clean | 0 |