vice-sdl2-svn
LOW
maintainer FredBezies
2 votes
scanned 2026-11-01 00:21:48.120785
Why flagged
The source is a Subversion checkout from the official project's SourceForge repository, which is a legitimate development source; building from VCS is normal for -svn packages and poses minimal risk despite the non-whitelisted host.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a Subversion checkout from the official project's SourceForge repository, which is a legitimate development source; building from VCS is normal for -svn packages and poses minimal risk despite the non-whitelisted host.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:17
source=("${_pkgname}::svn://svn.code.sf.net/p/vice-emu/code/trunk")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Frederic Bezies <fredbezies at gmail dot com>
2
# Based on vice-svn PKGBUILD by Benjamin Hodgetts <ben@xnode.org>
3
4
pkgname=vice-sdl2-svn
5
_pkgname=vice-svn
6
pkgver=r46300
7
pkgrel=1
8
pkgdesc="The Versatile Commodore Emulator 8-bits (PET/C64/C128/Plus4/Vic20) - SDL2 development version"
9
arch=('i686' 'x86_64')
10
url="http://vice-emu.sourceforge.net"
11
license=('GPL-2.0-or-later')
12
depends=(alsa-lib libpulse sdl2_image portaudio pciutils curl mpg123)
13
makedepends=(dos2unix libpcap libxaw texlive-bin texlive-plaingeneric xa xorg-bdftopcf xorg-mkfontdir subversion)
14
provides=('vice')
15
replaces=('vice')
16
conflicts=('vice' 'vice-svn')
17
source=("${_pkgname}::svn://svn.code.sf.net/p/vice-emu/code/trunk")
18
sha256sums=('SKIP')
19
options=(!debug)
20
21
pkgver() {
22
echo r$(svnversion "${SRCDEST}"/${_pkgname}/)
23
}
24
25
build() {
26
cd "${_pkgname}/vice"
27
28
./autogen.sh
29
./configure --prefix=/usr --libdir=/usr/lib --enable-sdl2ui --enable-pdf-docs --enable-ethernet --with-libcurl --with-mpg123
30
make
31
}
32
33
package() {
34
cd "${_pkgname}/vice"
35
make install DESTDIR="${pkgdir}/"
36
}
37
Changes since previous scan
--- PKGBUILD @ 2026-10-25 00:20+++ PKGBUILD @ 2026-11-01 00:21@@ -3,7 +3,7 @@ pkgname=vice-sdl2-svn _pkgname=vice-svn-pkgver=r46192+pkgver=r46300 pkgrel=1 pkgdesc="The Versatile Commodore Emulator 8-bits (PET/C64/C128/Plus4/Vic20) - SDL2 development version" arch=('i686' 'x86_64')Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 17:43:03 | Medium | 1 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |