simcity-3000-gog

maintainer jmsq · 1 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package downloads game data and compatibility libraries from various hosts, including GitHub and personal domains, but these are standard sources for community-maintained game mods and assets; no unverified executables or malicious payloads are executed, and the worst case of source substitution is limited to non-executable data or resources.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads game data and compatibility libraries from various hosts, including GitHub and personal domains, but these are standard sources for community-maintained game mods and assets; no unverified executables or malicious payloads are executed, and the worst case of source substitution is limited to non-executable data or resources.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:16 "https://files.gog.com/support/SC3U.zip"
  • PKGBUILD:18 "http://www.improbability.net/loki/loki_compat_libs-1.5.tar.bz2"

PKGBUILD

2 offending line(s) highlighted
1# Maintainer: John-Michael Mulesa <jmulesa at gmail dot com>
2
3pkgname=simcity-3000-gog
4_pkgname=simcity3000
5pkgver=2.0
6_pkgver=2.0.0.3
7pkgrel=2
8pkgdesc="SimCity 3000 Linux with data via GOG"
9arch=('i686' 'x86_64')
10url="https://www.gog.com/game/simcity_3000"
11license=('custom')
12depends=('ossp')
13makedepends=('innoextract' 'icoutils' 'perl-rename')
14install=simcity3000.install
15source=("setup_simcity3k_unlimited_${_pkgver}.exe::gogdownloader://simcity_3000/en1installer1"
16 "https://files.gog.com/support/SC3U.zip"
17 "https://github.com/jm2/archlinux-package-simcity-3000-gog/raw/master/sc3-lnx-support.tar.bz2"
18 "http://www.improbability.net/loki/loki_compat_libs-1.5.tar.bz2"
19 "https://github.com/liflg/sc3u_2.0a-multilingual_x86/archive/refs/heads/master.zip"
20 "${_pkgname}.desktop" "${_pkgname}.sh")
21sha256sums=('84a73753d9aa6e8e4e8097adec18fc4ea8d897dd9a2dc67d23463cf6338be280'
22 '122fd83f099c80929cbdc3602a3155d448b7f8879f632583060e61144c553b33'
23 'c55292c7bd183b8fc54b6c7e0ec9c53fc3657e759603cc5a174d83803b288de0'
24 '60932597d4ee94f0b629d7194774c2b9ce867f9519887d85e98eea84577c0e46'
25 '0f4aa72d88022f39501773c10fe5dc175795d7c3281f2197655dc5810b7eea8e'
26 '7b457a4ac29c48e8811e16db5d9fbf4f93e16ed5be2de92dc8b80f1c14c4e0d7'
27 'b8b034ebc75d10899ae9cef073675222bc592e2051875c85b5811f04b05ec6a8')
28
29# If you want to use lgogdownloader add the following to /etc/makepkg.conf
30# DLAGENTS+=('goggogdownloader::/usr/bin/lgogdownloader --download-file=%u -o %o')
31DLAGENTS+=("gogdownloader::/usr/bin/echo Could not find gog installer file (%u). Manually download it to \"$(pwd)\", or set up a gogdownloader:// DLAGENT in /etc/makepkg.conf. See PKGBUILD for example.")
32
33prepare() {
34 innoextract --gog -s "setup_simcity3k_unlimited_${_pkgver}.exe"
35 icotool -x -o . app/goggame-*.ico
36}
37
38package() {
39 mkdir -p $pkgdir/opt/${_pkgname}
40
41 # Install game icon.
42 install -Dm644 "${srcdir}/goggame-2086050016_6_256x256x32.png" "${pkgdir}/usr/share/pixmaps/${_pkgname}-gog.png"
43
44 # Install game data.
45 cp -r $srcdir/app/* $pkgdir/opt/${_pkgname}/
46
47 # Fix case-sensitivity issues.
48 perl-rename 'y/A-Z/a-z/' $pkgdir/opt/${_pkgname}/*
49 perl-rename 'y/A-Z/a-z/' $pkgdir/opt/${_pkgname}/apps/*
50 find $pkgdir/opt/${_pkgname}/apps/{res,sys,barender,bacustom} -execdir perl-rename 'y/A-Z/a-z/' '{}' \+
51 find $pkgdir/opt/${_pkgname}/cities -type d -execdir perl-rename 'y/A-Z/a-z/' '{}' \+
52 mv $pkgdir/opt/${_pkgname}/cities/TUTORIAL.SC3 $pkgdir/opt/${_pkgname}/cities/Tutorial.sc3
53 perl-rename 's/\.([^.]*)$/.\L$1/' $pkgdir/opt/${_pkgname}/cities/scenarios/*.SNR
54
55 # Install compat data.
56 cp $srcdir/sc3u_2.0a-multilingual_x86-master/data/*.sh $pkgdir/opt/${_pkgname}/
57 cp -r $srcdir/Loki_Compat $pkgdir/opt/${_pkgname}/
58 ln -s apps/{bacustom,barender,res,sys} $pkgdir/opt/${_pkgname}/
59 mv $pkgdir/opt/${_pkgname}/apps/sc3u.exe $pkgdir/opt/${_pkgname}/apps/sc3u.exe.orig
60 cp $srcdir/SC3U.exe $pkgdir/opt/${_pkgname}/apps/sc3u.exe # Not used by default but enables higher resolutions if WINE is used.
61 mkdir -p $pkgdir/opt/${_pkgname}/apps/res/sound/radio/stations
62 cp $srcdir/sc3-lnx-support/sc3u.ini $pkgdir/opt/${_pkgname}/
63 cp $srcdir/sc3-lnx-support/sys-gog-paths-fixed.pak $pkgdir/opt/${_pkgname}/apps/sys/sys.pak
64 cp $srcdir/sc3-lnx-support/csattrib_korea.ixf $pkgdir/opt/${_pkgname}/apps/res/sprites/csattrib_korea.ixf
65 cp $srcdir/sc3-lnx-support/occupantattribs_korea.ixf $pkgdir/opt/${_pkgname}/apps/res/occupant/occupantattribs_korea.ixf
66 cp $srcdir/sc3-lnx-support/audio.ini $pkgdir/opt/${_pkgname}/apps/res/sound/audio.ini
67 cp $srcdir/sc3-lnx-support/3kg2.xa $pkgdir/opt/${_pkgname}/apps/res/sound/music/3kg2.xa
68
69 # Install core linux data.
70 cd $pkgdir/opt/${_pkgname}/
71 tar xvf $srcdir/sc3u_2.0a-multilingual_x86-master/data/patch-2.0a.tar
72 rm lib/libSimBABld.so # Causes startup breakage; removing probably breaks BA but better than nothing.
73
74 # Install desktop file.
75 install -D -m 644 $srcdir/${_pkgname}.desktop \
76 $pkgdir/usr/share/applications/${_pkgname}.desktop
77
78 # Install bash startup script.
79 install -D -m 755 $srcdir/${_pkgname}.sh \
80 $pkgdir/usr/bin/${_pkgname}
81}
82

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion