uplink
LOW
maintainer heftig
9 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The non-standard host hosts only supplemental data (a PDF manual and a patch), while the main executable comes from a bundled file (uplink.zip) provided by the user, making the risk low despite the untrusted host.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The non-standard host hosts only supplemental data (a PDF manual and a patch), while the main executable comes from a bundled file (uplink.zip) provided by the user, making the risk low despite the untrusted host.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:28
https://pkgbuild.com/~heftig/uplink/UplinkBoBCodeCard.pdf
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Jan Alexander Steffens (heftig) <heftig@archlinux.org>
2
3
pkgname=uplink
4
pkgver=1.55
5
pkgrel=6
6
pkgdesc="Trust is a weakness (original CD release)"
7
url="https://www.introversion.co.uk/introversion/#games:~:text=Uplink"
8
arch=(x86_64)
9
license=(LicenseRef-Proprietary)
10
depends=(
11
bash
12
lib32-freetype2
13
lib32-gcc-libs
14
lib32-glibc
15
lib32-glu
16
lib32-libgl
17
lib32-libjpeg6-turbo
18
lib32-sdl12-compat
19
lib32-sdl_mixer
20
lib32-zlib
21
)
22
makedepends=(
23
patchelf
24
)
25
source=(
26
# Requires uplink.zip from original Uplink CD
27
file://uplink.zip
28
https://pkgbuild.com/~heftig/uplink/UplinkBoBCodeCard.pdf
29
https://pkgbuild.com/~heftig/uplink/uplink-patch-1.55.tar.gz
30
)
31
sha256sums=('52d5b1efaecca11b400c2ab7755924a8034c09a4edd201737ba61da6bc479c02'
32
'e5734f6c394b8eaa3a3449f4d4a6df0fefa4675fb8e8a515f83e4a3b710d528a'
33
'147f41468b0d837a168c760d045b23eecd95a7936fca239d3bea78be0a1936a0')
34
noextract=(
35
# contains an "uplink" executable which conflicts
36
# with the "uplink" directory in the patch archive
37
uplink.zip
38
)
39
40
prepare() {
41
bsdtar -xf uplink.zip '*.dat'
42
patchelf --set-rpath '$ORIGIN' uplink/lib/{uplink.bin.x86,libftgl.so.0}
43
}
44
45
package() {
46
local gamedir="$pkgdir/usr/lib/uplink"
47
install -Dm755 uplink/lib/{uplink.bin.x86,libftgl.so.0} -t "$gamedir"
48
install -Dm644 *.dat -t "$gamedir"
49
install -Dm644 uplink/lib/*.dat -t "$gamedir"
50
51
install -Dm755 /dev/stdin "$pkgdir/usr/bin/uplink" <<END
52
#!/bin/sh
53
exec /usr/lib/uplink/uplink.bin.x86 "\$@"
54
END
55
install -Dm644 /dev/stdin "$pkgdir/usr/share/applications/uplink.desktop" <<END
56
[Desktop Entry]
57
Name=Uplink
58
GenericName=Futuristic computer crime game.
59
Comment=Trust is a weakness.
60
Encoding=UTF-8
61
Version=1.55
62
Type=Application
63
Terminal=false
64
Icon=uplink
65
Exec=/usr/lib/uplink/uplink.bin.x86
66
Categories=Application;Game;
67
END
68
install -Dm644 uplink/uplink.png -t "$pkgdir/usr/share/pixmaps"
69
70
install -Dm644 UplinkBoBCodeCard.pdf uplink/[^l]*.{txt,patch} -t "$pkgdir/usr/share/doc/$pkgname"
71
install -Dm644 uplink/license.txt -t "$pkgdir/usr/share/licenses/$pkgname"
72
}
73
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |