vice-svn

maintainer FredBezies · 2 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a Subversion checkout from the official project's SourceForge repository, which is a normal and expected practice for development versions; the non-standard host is the project's own forge, not a swappable file host, and the build uses the project's own code.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a Subversion checkout from the official project's SourceForge repository, which is a normal and expected practice for development versions; the non-standard host is the project's own forge, not a swappable file host, and the build uses the project's own code.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:16 source=("${pkgname}::svn://svn.code.sf.net/p/vice-emu/code/trunk"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Frederic Bezies <fredbezies at gmail dot com>
    
      2# Contributor: Benjamin Hodgetts <ben@xnode.org>
    
      3
    
      4pkgname=vice-svn
    
      5pkgver=r46192
    
      6pkgrel=1
    
      7pkgdesc="The Versatile Commodore Emulator 8-bits (PET/C64/C128/Plus4/Vic20) - Development version"
    
      8arch=('i686' 'x86_64')
    
      9url="http://vice-emu.sourceforge.net"
    
      10license=('GPL-2.0-or-later')
    
      11depends=(libevdev glew gtk3 portaudio libpulse pciutils curl mpg123)
    
      12makedepends=(dos2unix libpcap libxaw xa texlive-basic texlive-bin texlive-plaingeneric xorg-bdftopcf xorg-mkfontdir subversion glib2-devel)  
    
      13provides=('vice')
    
      14replaces=('vice')
    
      15conflicts=('vice' 'vice-sdl2' 'vice-sdl2-svn')
    
      16source=("${pkgname}::svn://svn.code.sf.net/p/vice-emu/code/trunk"
    
      17vice-org-vsid.desktop
    
      18vice-org-x64dtv.desktop
    
      19vice-org-x64sc.desktop
    
      20vice-org-x128.desktop
    
      21vice-org-xcbm2.desktop
    
      22vice-org-xcbm5x0.desktop
    
      23vice-org-xpet.desktop
    
      24vice-org-xplus4.desktop
    
      25vice-org-xscpu64.desktop
    
      26vice-org-xvic.desktop
    
      27C64_1024.svg
    
      28C128_1024.svg
    
      29CBM2_1024.svg
    
      30CBM_Logo.svg
    
      31DTV_1024.svg
    
      32PET_1024.svg
    
      33Plus4_1024.svg
    
      34SCPU_1024.svg
    
      35SID_1024.svg
    
      36VIC20_1024.svg
    
      37)
    
      38sha256sums=('SKIP'
    
      39            'd124e0033f7ffb45ea3582c01971f8b51c429cd18df36abd75e21847da728a6a'
    
      40            '2bf07e60c6bdf332f7d31c9ef1572953f96d5b540cd76c7d07be72769eb052c3'
    
      41            'dd58d7ab618a7d70ac336b8c44f38438305ba9b94a54635b393c7c281e91824d'
    
      42            '8c0a385123ddd7b968be4edda9a079c995d279c30b0ec90bbb5a0171f72ea7b9'
    
      43            'dea9da4cb71dc85d53755b07bb9df04d09c2889c0eb905ca2823952a649ec4e1'
    
      44            '0cf0ff49d5c23e923a29f70bbc2299b06f79204606761f9065c3d10231ed2e67'
    
      45            'edb663a57b2fa4aadb87a1ec9e87b5e204638159b2fb65acfa145df0922b6f88'
    
      46            '2b30f1a92dc456a838ab00d9860d7325bf61b1f402e542bda70f65a8e03b9d04'
    
      47            'dedaf7ae2c1d5713997dae7d4e778c36bdbc698f8d07cca4c8ed7bc556a8fb44'
    
      48            '4be98cd407cec01231cce3b9420c3b973a36c9442cd6b71b9569ad393f5a0801'
    
      49            '2f6b915b16d955ebf4af7458075ad55399e5fc134c5b228abc93542410764084'
    
      50            'cec437f3def18b45a4a3fceb6c8c6e8d8f3ff148f39bf33068f68e56c4a2412a'
    
      51            '09da7fee74f13667a4a1d869f1c1c4fe5fd0ace8b092c5ae846c3e4c3a09d584'
    
      52            '71f0acf2d762869a33b121141e1c3f63b53a474fcb2f3a6a64417ad4d7e7d90d'
    
      53            '5e0af7deadbdad829f8efc762236695530805d93d85e8f379b5c5f99de8a5412'
    
      54            'b6fecc7c862c5c7370f9eda716f029255d9bb29c6c507080b53589d3ab896db2'
    
      55            'db2a72d6185b7eddc476639a24b81ec9bd193b83ace44d26bfad8111239451a8'
    
      56            'ce2710836a0622295d033c6b21d8d1b896cc3138d774234336f07bfc292ee317'
    
      57            'c443e2f8617b6404cd5a26678a5c018c8b12a0c1024275aebfe2e2addab17368'
    
      58            'bee44a1fe16fb92550c5960b9c568982624a6c3d18bdb44f82efd34ea0a0c66c')
    
      59options=(!debug)
    
      60
    
      61pkgver() {
    
      62	echo r$(svnversion "${SRCDEST}"/${pkgname}/)
    
      63}
    
      64
    
      65
    
      66
    
      67build() {
    
      68	cd "${pkgname}/vice"
    
      69	./autogen.sh 
    
      70    	./configure --prefix=/usr --libdir=/usr/lib --enable-gtk3ui --enable-pdf-docs --enable-ethernet --with-libcurl --with-mpg123
    
      71	make
    
      72}
    
      73
    
      74package() {
    
      75	cd "${pkgname}/vice"
    
      76	make install DESTDIR="${pkgdir}/"
    
      77	# Working around --enable-desktop-files bug
    
      78	# See https://sourceforge.net/p/vice-emu/bugs/1379/
    
      79	mkdir $pkgdir/usr/share/applications/
    
      80	cp $srcdir/*.desktop $pkgdir/usr/share/applications/
    
      81	cp $srcdir/*.svg $pkgdir/usr/share/vice/common/
    
      82}
    
      83

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-08-03 00:08
@@ -2,7 +2,7 @@
 # Contributor: Benjamin Hodgetts <ben@xnode.org>
 
 pkgname=vice-svn
-pkgver=r46146
+pkgver=r46192
 pkgrel=1
 pkgdesc="The Versatile Commodore Emulator 8-bits (PET/C64/C128/Plus4/Vic20) - Development version"
 arch=('i686' 'x86_64')

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 09:17:30	MEDIUM	1
2026-06-19 19:07:35	CLEAN	2
2026-06-18 17:53:10	CLEAN	2
2026-06-18 16:11:54	MEDIUM	1