sqrilizz-launcher-bin

maintainer sqrilizz · 0 votes · scanned 2026-08-03 00:08:14.047287

MEDIUM

Why flagged The package installs a prebuilt AppImage from an unverifiable source with skipped checksums, creating a supply-chain risk if the release asset were tampered with or silently replaced.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

MEDIUM AI review of an ambiguous pattern llm_review

The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it MEDIUM (confidence 95%): The package installs a prebuilt AppImage from an unverifiable source with skipped checksums, creating a supply-chain risk if the release asset were tampered with or silently replaced.

PKGBUILD

      1pkgname=sqrilizz-launcher-bin
    
      2pkgver=1.0.3
    
      3pkgrel=1
    
      4pkgdesc='Cross-platform Minecraft launcher for Sqrilizz Launcher'
    
      5arch=('x86_64')
    
      6url='https://github.com/Sqrilizz/SqrilizzLauncher'
    
      7license=('GPL-3.0-only')
    
      8depends=('gtk3' 'webkit2gtk-4.1' 'libayatana-appindicator' 'openssl')
    
      9provides=('sqrilizz-launcher')
    
      10conflicts=('sqrilizz-launcher')
    
      11options=('!strip')
    
      12source=(
    
      13  "SqrilizzLauncher.AppImage::https://github.com/Sqrilizz/SqrilizzLauncher/releases/download/v${pkgver}/Sqrilizz.Launcher_${pkgver}_amd64.AppImage"
    
      14  "sqrilizz-launcher.png::https://raw.githubusercontent.com/Sqrilizz/SqrilizzLauncher/v${pkgver}/apps/app/icons/128x128.png"
    
      15)
    
      16sha256sums=('SKIP' 'SKIP')
    
      17
    
      18package() {
    
      19  install -Dm755 "$srcdir/SqrilizzLauncher.AppImage" "$pkgdir/opt/sqrilizz-launcher/SqrilizzLauncher.AppImage"
    
      20  install -Dm644 "$srcdir/sqrilizz-launcher.png" "$pkgdir/usr/share/icons/hicolor/128x128/apps/sqrilizz-launcher.png"
    
      21
    
      22  install -d "$pkgdir/usr/bin"
    
      23  cat > "$pkgdir/usr/bin/sqrilizz-launcher" <<'EOF'
    
      24#!/bin/sh
    
      25exec /opt/sqrilizz-launcher/SqrilizzLauncher.AppImage "$@"
    
      26EOF
    
      27  chmod 755 "$pkgdir/usr/bin/sqrilizz-launcher"
    
      28
    
      29  install -d "$pkgdir/usr/share/applications"
    
      30  cat > "$pkgdir/usr/share/applications/sqrilizz-launcher.desktop" <<'EOF'
    
      31[Desktop Entry]
    
      32Name=Sqrilizz Launcher
    
      33Comment=Cross-platform Minecraft launcher
    
      34Exec=sqrilizz-launcher %U
    
      35Icon=sqrilizz-launcher
    
      36Terminal=false
    
      37Type=Application
    
      38Categories=Game;
    
      39MimeType=application/x-modrinth-modpack+zip;x-scheme-handler/modrinth;
    
      40StartupWMClass=SqrilizzLauncher
    
      41EOF
    
      42}
    
      43

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	MEDIUM	2
2026-08-02 00:16:08	MEDIUM	2
2026-08-01 00:11:18	MEDIUM	2
2026-07-31 23:19:22	MEDIUM	2