tesseract-game

maintainer aaronfischer · 11 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The source is a tarball from tuxfamily.org, a known free software hosting provider; it is the project's own source code being built, not a prebuilt binary, and the checksums are provided, making it a normal AUR build despite the non-whitelisted host.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from tuxfamily.org, a known free software hosting provider; it is the project's own source code being built, not a prebuilt binary, and the checksums are provided, making it a normal AUR build despite the non-whitelisted host.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:17 source=('http://download.tuxfamily.org/tesseract/tesseract_2014_05_12_first_edition_linux.tar.xz'

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Aaron Fischer <mail@aaron-fischer.net>
2# Contributor: Alexander F Rødseth <xyproto@archlinux.org>
3# Contributor: portals <portals at riseup.net>
4# Contributor: novemberist
5# Contributor: PyroDevil
6# Contributor: giacomogiorgianni@gmail.com
7
8pkgname=tesseract-game
9pkgver=20240512
10pkgrel=1
11pkgdesc='Smooth FPS with map editing, instagib, DM and CTF'
12url='http://tesseract.gg/'
13arch=('x86_64' 'i686')
14license=('ZLIB')
15depends=('libgl' 'sdl2' 'sdl2_image' 'sdl2_mixer' 'libpng' 'zlib')
16makedepends=('gendesk' 'imagemagick')
17source=('http://download.tuxfamily.org/tesseract/tesseract_2014_05_12_first_edition_linux.tar.xz'
18 'tesseract.sh')
19sha512sums=('a625775501b57c519c624bdd9b29d4f89d29c0caedbf6ad4143a65c1f9f9dc088d289953ce3d5043f3467cc8dd86ba9040e636a20a16d5114cf6e7434e089f96'
20 '425c47db63c2f094fcb1f9e10687c07ee515ff6e3b0ba2d81482a608f9a41edd7107be774d8e6707354d0ce4c1c2d3d92aee99da247e16dfbadc87a0c3085e9c')
21
22prepare() {
23 gendesk -f -n --pkgname ${pkgname/-game} --pkgdesc "$pkgdesc" --exec "$pkgname"
24 for dim in 16 32 48 64 128 256 512; do
25 convert -resize "${dim}x${dim}" tesseract/media/interface/cube.png "$pkgname$dim.png" 2> /dev/null
26 done
27}
28
29build() {
30 make -C tesseract/src
31}
32
33package() {
34 local n=tesseract
35 cd "$n"
36 make -C src install
37 install -d "$pkgdir/usr/share/$pkgname/"
38 cp -R media/ config/ "$pkgdir/usr/share/$pkgname"
39 install -Dm755 bin_unix/native_client "$pkgdir/usr/bin/$n-client"
40 install -Dm755 bin_unix/native_server "$pkgdir/usr/bin/$n-server"
41 install -Dm644 "src/readme_$n.txt" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
42 install -Dm755 "../$n.sh" "$pkgdir/usr/bin/$pkgname"
43 install -Dm644 "../$n.desktop" "$pkgdir/usr/share/applications/$n.desktop"
44 for dim in 16 32 48 64 128 256 512; do
45 install -Dm644 "../$pkgname$dim.png" \
46 "$pkgdir/usr/share/icons/hicolor/${dim}x$dim/apps/$n.png"
47 done
48 install -Dm644 "../${pkgname}48.png" "$pkgdir/usr/share/pixmaps/$n.png"
49}
50

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion