squirrel304
LOW
maintainer meow6969
0 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The source is a tarball from a defunct official project download host (Google Code Archive), now mirrored on Google Cloud Storage; it builds from verifiable source code with a matching checksum, posing no active threat.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from a defunct official project download host (Google Code Archive), now mirrored on Google Cloud Storage; it builds from verifiable source code with a matching checksum, posing no active threat.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:11
source=("https://storage.googleapis.com/google-code-archive-downloads/v2/code.google.com/squirrel/squirrel_3_0_4_stable.tar.gz")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: meow <sosdjolfkhgsldjkfh@gmail.com>
2
# based on this package: https://aur.archlinux.org/packages/squirrel
3
4
pkgname=squirrel304
5
pkgver=3.0.4
6
pkgrel=1
7
pkgdesc="Major release 3.0.4 of the light-weight scripting language that fits in the size, memory bandwidth, and real-time requirements of applications like video games. Installs itself in /bin/squirrel304"
8
arch=('i686' 'x86_64')
9
url="http://www.squirrel-lang.org/"
10
license=('MIT')
11
source=("https://storage.googleapis.com/google-code-archive-downloads/v2/code.google.com/squirrel/squirrel_3_0_4_stable.tar.gz")
12
sha256sums=('6a3706accf9872aafea1eb3f3f3018b135e2671033824ccebf0735a98b2440a5')
13
# provides=('squirrel')
14
# conflicts=('squirrel')
15
16
prepare() {
17
_sqsrc="${srcdir}/SQUIRREL3"
18
19
mkdir -p "${_sqsrc}/include/${pkgname}"
20
mv -v "${_sqsrc}/include/"*.h "${_sqsrc}/include/${pkgname}/"
21
22
mkdir -p "${_sqsrc}/lib/${pkgname}"
23
24
# sq/ directory
25
sed -r -io -e 's/(LIBZ=.*\/lib)/\1\/'${pkgname}'/g' "${_sqsrc}/sq/Makefile"
26
sed -r -io -e 's/(INCZ=.*include)/\1\/'${pkgname}'/g' "${_sqsrc}/sq/Makefile"
27
28
# sqstdlib/ directory
29
sed -r -io -e 's/(OUT=.*\/lib)\/(libsq[a-z]*\.a)/\1\/'${pkgname}'\/\2/g' "${_sqsrc}/sqstdlib/Makefile"
30
sed -r -io -e 's/(INCZ=.*\/include)(.*Iinclude)/\1\/'${pkgname}'\2\/'${pkgname}'/g' "${_sqsrc}/sqstdlib/Makefile"
31
32
# squirrel/ directory
33
sed -r -io -e 's/(OUT=.*\/lib)\/(libsq[a-z]*\.a)/\1\/'${pkgname}'\/\2/g' "${_sqsrc}/squirrel/Makefile"
34
sed -r -io -e 's/(INCZ=.*\/include)(.*Iinclude)/\1\/'${pkgname}'\2\/'${pkgname}'/g' "${_sqsrc}/squirrel/Makefile"
35
}
36
37
build() {
38
cd "${srcdir}/SQUIRREL3"
39
# If $arch is x86_64, compile for 64bits. Else do it for 32.
40
if [ $CARCH=='x86_64' ]; then
41
make sq64
42
else
43
make sq32
44
fi
45
}
46
47
package() {
48
_sqsrc="${srcdir}/SQUIRREL3"
49
cd "${_sqsrc}"
50
51
# Install squirrel Interpreter
52
install -Dm755 bin/sq "${pkgdir}"/usr/bin/$pkgname
53
54
# Install Includes and various headers
55
for _file in $(ls "${_sqsrc}/include/${pkgname}")
56
do
57
install -Dm644 include/${pkgname}/$_file "${pkgdir}"/usr/include/${pkgname}/$_file
58
done
59
# Install all static libraries & others
60
for _file in $(ls "${_sqsrc}/lib/${pkgname}")
61
do
62
install -Dm644 lib/${pkgname}/$_file "${pkgdir}"/usr/lib/${pkgname}/$_file
63
done
64
65
# Install docs & examples.
66
for _file in $(ls "${_sqsrc}"/doc)
67
do
68
install -Dm644 doc/$_file "${pkgdir}"/usr/share/$pkgname/doc/$_file
69
done
70
for _file in $(ls "${_sqsrc}"/samples)
71
do
72
install -Dm644 samples/$_file "${pkgdir}"/usr/share/$pkgname/samples/$_file
73
done
74
75
# Install Other docs
76
install -Dm644 COPYRIGHT "${pkgdir}"/usr/share/licenses/$pkgname/COPYRIGHT
77
install -Dm644 HISTORY "${pkgdir}"/usr/share/$pkgname/HISTORY
78
install -Dm644 README "${pkgdir}"/usr/share/$pkgname/README
79
for _file in $(ls "${srcdir}"/squirrel3/etc)
80
do
81
# i think this is supposed to be "embedding" instead of "embebing" ???
82
# install -Dm644 etc/$_file "${pkgdir}"/usr/share/$pkgname/embebing/$_file
83
install -Dm644 etc/$_file "${pkgdir}"/usr/share/$pkgname/embedding/$_file
84
done
85
}
86
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |