towerofatum-bin

LOW

maintainer NickMarcha 0 votes scanned 2026-10-06 12:02:18.455551

View on AUR

Why flagged

The package installs a prebuilt game binary from the maintainer's GitHub release page, which is a common practice for closed-source or privately developed games; the source host is not whitelisted but belongs to a legitimate developer account, and the files are verified via fixed SHA256 checksums, minimizing supply-chain risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt game binary from the maintainer's GitHub release page, which is a common practice for closed-source or privately developed games; the source host is not whitelisted but belongs to a legitimate developer account, and the files are verified via fixed SHA256 checksums, minimizing supply-chain risk.

PKGBUILD

      1# Maintainer: NickMarcha
    
      2#
    
      3# The prebuilt Linux release from https://github.com/NickMarcha/TowerOfAtum-releases (the source is private, hence
    
      4# -bin). Installed under /opt/towerofatum; `towerofatum` plays offline and `towerofatum-server` hosts.
    
      5pkgname=towerofatum-bin
    
      6pkgver=0.2.0
    
      7pkgrel=1
    
      8pkgdesc="Work-in-progress multiplayer spell-combat game, played offline against a local server"
    
      9arch=('x86_64')
    
      10url="https://github.com/NickMarcha/TowerOfAtum-releases"
    
      11license=('LicenseRef-TowerOfAtum')
    
      12# The player links only glibc and gcc-libs; Unity loads the display, graphics, input and audio libraries at run time.
    
      13depends=('glibc' 'gcc-libs' 'libx11' 'libxcursor' 'libxrandr' 'libxi' 'libglvnd' 'vulkan-icd-loader' 'wayland'
    
      14         'cairo' 'pango' 'dbus' 'systemd-libs' 'alsa-lib')
    
      15optdepends=('libpulse: sound through PulseAudio or PipeWire')
    
      16provides=('towerofatum')
    
      17conflicts=('towerofatum')
    
      18# Unity's libraries must not be stripped.
    
      19options=('!strip' '!debug')
    
      20source=("https://github.com/NickMarcha/TowerOfAtum-releases/releases/download/client-v${pkgver}/TowerOfAtum-client-${pkgver}-linux.tar.gz"
    
      21        'towerofatum'
    
      22        'towerofatum-server'
    
      23        'towerofatum.desktop'
    
      24        'LICENSE')
    
      25sha256sums=('d30db0bc0f757a3ea7e4ff866e062e021bc46a7147f09f715a65700de81f9ff0'
    
      26            'f5ee4cb6381515b3da3cc17a0765c5984312f3837ed6f698e93e388c39bbf88d'
    
      27            '3801c09495ed6ae351ebb358d166cba64f87498205fefb3a97cbe52dd9dd1893'
    
      28            'f6ccd0949aa69d4bc19bf0c9e7aeb473ab2947396426c5fa1a09b556753d50db'
    
      29            '86a3c6a009a2677171ae6cbcedd3ed245d571fdd7060f024331268b75572234d')
    
      30
    
      31package() {
    
      32    local game="TowerOfAtum-client-${pkgver}-linux"
    
      33    install -d "$pkgdir/opt/towerofatum"
    
      34    cp -a "$game/." "$pkgdir/opt/towerofatum/"
    
      35    # The release's own launchers update themselves and write logs beside the game; the commands below replace them.
    
      36    rm -f "$pkgdir/opt/towerofatum/"{play.sh,run-server.sh,version.txt}
    
      37    install -Dm755 towerofatum "$pkgdir/usr/bin/towerofatum"
    
      38    install -Dm755 towerofatum-server "$pkgdir/usr/bin/towerofatum-server"
    
      39    install -Dm644 towerofatum.desktop "$pkgdir/usr/share/applications/towerofatum.desktop"
    
      40    install -Dm644 "$game/README.txt" "$pkgdir/usr/share/doc/towerofatum/README.txt"
    
      41    install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      42}
    
      43

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-06 12:02:18	Low	2