tanks-of-freedom

maintainer LuckyTurtleDev · 1 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads the project's own source code from its official GitHub repository and Godot export templates from a trusted project host (tuxfamily.org), which is a common and legitimate practice for building Godot games; the non-whitelisted host is not a supply-chain risk in this context.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads the project's own source code from its official GitHub repository and Godot export templates from a trusted project host (tuxfamily.org), which is a common and legitimate practice for building Godot games; the non-whitelisted host is not a supply-chain risk in this context.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:15 "https://downloads.tuxfamily.org/godotengine/2.1.6/Godot_v2.1.6-stable_export_templates.tpz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Lukas1818 aur at lukas1818 dot de
    
      2
    
      3pkgname=tanks-of-freedom
    
      4pkgver=0.7.0
    
      5_pkgtag=$pkgver
    
      6pkgrel=2
    
      7pkgdesc="Indie Turn Based Strategy in Isometric Pixel Art"
    
      8arch=('x86_64')
    
      9url="https://github.com/w84death/Tanks-of-Freedom"
    
      10license=('MIT')
    
      11options=('!strip')
    
      12makedepends=('godot2')
    
      13depends=('libx11' 'libxinerama' 'libxcursor' 'libxrandr' 'libxi' 'alsa-lib' 'libpulse' 'libglvnd' 'glibc')
    
      14source=("https://github.com/w84death/Tanks-of-Freedom/archive/$_pkgtag-beta.tar.gz"
    
      15        "https://downloads.tuxfamily.org/godotengine/2.1.6/Godot_v2.1.6-stable_export_templates.tpz"
    
      16        "Tanks of Freedom.desktop")
    
      17sha512sums=('8d71981fe1fa79e5734204bcca7f0ef088c529e25d78bcdc619ed689a8d341223dd2d75328f16d8ff59c0b478117d689fab59f21e12a5056bf8336b18749cad6'
    
      18            '97bbc24dcdaeba7051a6e1846301b6da5f7876e72bbb2e524c3c063434d830c289bb5b3c7ae7b2e2a0c5c72d0e12aefc0662c30ebf2ccb5185368f4ce8ca09cf'
    
      19            '68c69aed77b8b2d295e6af28f2b82a131368d0aa3620f365f2462ba4b6de51fae34c1a9bc0daa982a81f70a91e8d2f4edc8a6b8efa4a3c5e316126d6220ea9f5')
    
      20
    
      21prepare()
    
      22{
    
      23  test -f ~/.godot/templates/linux_x11_64_release \
    
      24    || mkdir -p ~/.godot/templates/ \
    
      25    && cp "$srcdir/templates/linux_x11_64_release" ~/.godot/templates/linux_x11_64_release
    
      26
    
      27  mkdir -p "$srcdir/build"
    
      28  cd "$srcdir/Tanks-of-Freedom-$_pkgtag-beta"
    
      29
    
      30  cp buildConfig/export_desktop.cfg export.cfg
    
      31  cp -f buildConfig/engine_desktop.cfg engine.cfg
    
      32}
    
      33
    
      34build()
    
      35{
    
      36  cd "$srcdir/Tanks-of-Freedom-$_pkgtag-beta"
    
      37  godot2 -export "Linux X11" ./../build/tanks-of-freedom
    
      38}
    
      39
    
      40package()
    
      41{
    
      42  install -d "$pkgdir/usr/bin/"
    
      43  install -m 755 "$srcdir/build/tanks-of-freedom" "$pkgdir/usr/bin/tanks-of-freedom"
    
      44  install -d "$pkgdir/usr/share/applications"
    
      45  install -m 644 "$srcdir/Tanks of Freedom.desktop" "$pkgdir/usr/share/applications/"
    
      46  install -d "$pkgdir/usr/share/icons"
    
      47  install -m 644 "$srcdir/Tanks-of-Freedom-$_pkgtag-beta/assets/icons/icon1024.png" "$pkgdir/usr/share/icons/tanks-of-freedom-1024.png"
    
      48}
    
      49

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2