serioussam-st8vi
The package downloads source code from GitHub (maintainer's fork) and a data archive from archive.org; the latter is non-whitelisted but hosts non-executable game modification data, not code, so the worst-case impact of a swap is limited to data tampering.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads source code from GitHub (maintainer's fork) and a data archive from archive.org; the latter is non-whitelisted but hosts non-executable game modification data, not code, so the worst-case impact of a swap is limited to data tampering.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:27
"https://archive.org/download/sam-tse-st8vi/SamTSE-ST8VI.tar.xz")
PKGBUILD
1 offending line(s) highlighted# Maintainer: Alexander <tx00100xt@yandex.ru>
# Contributer: Alexander <tx00100xt@yandex.ru>
pkgname=serioussam-st8vi
pkginstdir=serioussamse
st8vi=SamTSE-ST8VI.tar.xz
pkgver=1.7.2
_srcname="SE1-TSE-ST8VI-$pkgver"
pkgrel=1
pkgdesc="Serious Sam Classic ST8VI native Linux."
arch=('i686' 'x86_64')
url="https://github.com/tx00100xt/SE1-TSE-ST8VI"
license=('GPL2')
if pacman -Qq serioussam >/dev/null 2>&1; then
depends=('sdl2' 'python' 'bash' 'serioussam')
elif pacman -Qq serioussam-vk >/dev/null 2>&1; then
depends=('sdl2' 'python' 'bash' 'serioussam-vk')
else
echo "This package requires either "serioussam" or "serioussam-vk", but neither is installed."
echo "Compilation aborted."
return 1
fi
makedepends=('cmake' 'make' 'sed')
source=("https://github.com/tx00100xt/SE1-TSE-ST8VI/archive/refs/tags/v$pkgver.tar.gz"
"https://archive.org/download/sam-tse-st8vi/SamTSE-ST8VI.tar.xz")
noextract=("SamTSE-ST8VI.tar.xz")
sha256sums=('3b7cdb8c7478cc019914880a75182970cc1a783a86e34729af3a4ae82d63b046'
"0a6954285f6ec430177e808fb6cf839f60163b78e23b1cca8f5a715dc7655d0d")
if [[ $CARCH = "i686" ]]; then
_bits="32"
else
_bits="64"
fi
prepare(){
# Install the ST8VI Modification data.
mkdir "$srcdir/$_srcname"/{SamTSE,SamTSE/Mods,SamTSE/Mods/ST8VI} || return 0
tar -xJvf "$srcdir/$st8vi" -C "$srcdir/$_srcname/SamTSE/"
chmod -R o=rx "$srcdir/$_srcname/SamTSE/Mods/ST8VI"
chmod -R g=rx "$srcdir/$_srcname/SamTSE/Mods/ST8VI"
# Making building scripts.
cd "$srcdir/$_srcname/Sources/"
sed -i 's/cmake -DCMAKE_BUILD_TYPE=RelWithDebInfo/cmake -DCMAKE_BUILD_TYPE=Release/g' build-linux"$_bits".sh
sed 's/cmake -DCMAKE_BUILD_TYPE=Release/cmake -DTFE=FALSE -DCMAKE_BUILD_TYPE=Release/g' build-linux"$_bits".sh > build-linux"$_bits"-tse.sh
chmod 755 build-linux"$_bits"-tse.sh
}
build(){
# Building Serious Sam ST8VI.
cd "$srcdir/$_srcname/Sources/"
./build-linux"$_bits"-tse.sh
mv "$srcdir/$_srcname/Sources/cmake-build/Debug/libGameMP.so" "$srcdir/$_srcname/SamTSE/Mods/ST8VI/Bin" || return 1
mv "$srcdir/$_srcname/Sources/cmake-build/Debug/libEntitiesMP.so" "$srcdir/$_srcname/SamTSE/Mods/ST8VI/Bin" || return 1
# Removing Serious Sam ST8VI tmp stuff.
cd "$srcdir/$_srcname/"
rm -fr "Sources"
rm -fr "Tools.Win32"
rm -f "$srcdir/$_srcname"/{*.sh,*.old,*.md}
rm -fr "$srcdir/$_srcname"/{Images,x32,x64}
}
package(){
# Making sure directories exist.
install -d $pkgdir/usr/lib/{serioussamse,serioussamse/Mods,serioussamse/Mods/ST8VI}
install -d $pkgdir/usr/share/{serioussamse,serioussamse/Mods}
install -D -m0755 $srcdir/$_srcname/SamTSE/Mods/ST8VI/Bin/libGameMP.so $pkgdir/usr/lib/serioussamse/Mods/ST8VI
install -D -m0755 $srcdir/$_srcname/SamTSE/Mods/ST8VI/Bin/libEntitiesMP.so $pkgdir/usr/lib/serioussamse/Mods/ST8VI
rm -fr "$srcdir/$_srcname/SamTSE/Mods/ST8VI/Bin"
# Making sure directories exist.
install -d $pkgdir/usr/share/licenses
# Install license.
install -D -m 644 $srcdir/$_srcname/LICENSE \
$pkgdir/usr/share/licenses/$pkgname/LICENSE
rm -f "$srcdir/$_srcname/LICENSE" || return 1
# Install data.
mv "$srcdir/$_srcname/SamTSE/Mods" "$pkgdir/usr/share/$pkginstdir/"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |