rpcemu

LOW

maintainer fabertawe 1 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The source is a tarball from the project's official host (marutan.net), used to build the software from source; the host is not whitelisted but is plausibly the project's own, and no untrusted executable is run.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's official host (marutan.net), used to build the software from source; the host is not whitelisted but is plausibly the project's own, and no untrusted executable is run.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:15 source=("http://www.marutan.net/rpcemu/cgi/download.php?sFName=${pkgver}/rpcemu-${pkgver}.tar.gz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Paul Bell <linux "at" dpb "dot" org "dot" uk>
    
      2# Contributor: Natalia Portillo <claunia@clania.com>
    
      3pkgname=rpcemu
    
      4pkgver=0.9.5
    
      5pkgrel=2
    
      6pkgdesc="An Emulator of classic Acorn computer systems, such as the Risc PC and A7000"
    
      7url="http://www.marutan.net/rpcemu/"
    
      8arch=('x86_64' 'i686')
    
      9license=('GPL-2.0-only')
    
      10makedepends=('qt5-base' 'qt5-multimedia')
    
      11optdepends=('apulse: PulseAudio emulation for ALSA'
    
      12            'lib32-apulse: PulseAudio emulation for ALSA (32-bit)')
    
      13backup=('usr/share/rpcemu/rpc.cfg')
    
      14install="$pkgname.install"
    
      15source=("http://www.marutan.net/rpcemu/cgi/download.php?sFName=${pkgver}/rpcemu-${pkgver}.tar.gz")
    
      16sha256sums=('4e4624641cd1a83af275bd6da8765d4a0e5e0c83f008f059014cc24c5c33d59e')
    
      17_pkgnames=("rpcemu-recompiler" "rpcemu-interpreter")
    
      18
    
      19# set the _bool variable for whether you want rpcemu-recompiler (_bool=0)
    
      20# or rpcemu-interpreter (_bool=1) to be used in the run script
    
      21_bool=0
    
      22# set _apulse to anything (e.g. "1") for non-pulseaudio users using apulse to
    
      23# be able to use ALSA for audio in the emulator
    
      24_apulse=
    
      25
    
      26build() {
    
      27  # need to add "-fcommon". GCC 10 has apparently changed how multiple symbols
    
      28  # defined in different sources are dealt with by default
    
      29  export CFLAGS="$CFLAGS -fcommon -std=gnu17"
    
      30  # build rpcemu-interpreter first...
    
      31  cd "$srcdir/${pkgname}-${pkgver}/src/qt5"
    
      32  qmake-qt5
    
      33  make
    
      34  # now build rpcemu-recompiler
    
      35  sed -e "s/CONFIG += debug_and_release/CONFIG += debug_and_release dynarec/" \
    
      36      -i "$srcdir/${pkgname}-${pkgver}/src/qt5/rpcemu.pro"
    
      37  qmake-qt5
    
      38  make
    
      39}
    
      40
    
      41package() {
    
      42  local _systdir="/usr/share"
    
      43  local _basedir="$pkgdir/$_systdir/$pkgname"
    
      44
    
      45  cd "$srcdir/${pkgname}-${pkgver}"
    
      46  install -dm755 "$pkgdir/usr/bin"
    
      47
    
      48  # must be writable (group) for rpcemu to function
    
      49  install -dm775 "$_basedir"
    
      50
    
      51  # install as provided
    
      52  install -Dm644 COPYING -t "$pkgdir/usr/share/licenses/$pkgname"
    
      53  install -Dm644 {cmos.ram,readme.txt,rpc.cfg} -t "$_basedir"
    
      54  install -Dm755 "${_pkgnames[@]}" "$_basedir"
    
      55  cp -R "hostfs" "netroms" "poduleroms" "riscos-progs" "roms" "$_basedir"
    
      56
    
      57  # create a script to set working directory (to find rom) and run ${_pkgnames[$_bool]}
    
      58  # and apply optional use of apulse. Note: dirname and readlink are used for
    
      59  # portability (i.e. relocating install for using multiple RISCOS versions)
    
      60  echo -e '#!/bin/sh'"\n"'cd "$(dirname "$(readlink -f "$0")")"'"\n${_apulse:+apulse }./${_pkgnames[$_bool]}" >"$_basedir/$pkgname"
    
      61
    
      62  chmod 755 "$_basedir/$pkgname"
    
      63  ln -s "$_systdir/$pkgname/$pkgname" "$pkgdir/usr/bin/$pkgname"
    
      64
    
      65  # these must be writable (group) for rpcemu to function
    
      66  # make sure you're in the "users" group!
    
      67  chown -R root:users "$_basedir"
    
      68  chmod -R g+w "$_basedir"/{cmos.ram,rpc.cfg,roms,hostfs}
    
      69}
    
      70

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 00:29:17	Low	2