visionaire-studio-appimage
LOW
maintainer robertomorrison
0 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads an AppImage and appimagetool from official project and GitHub release URLs; while the host is not whitelisted, both sources are legitimate and verifiable, and no untrusted remote code execution occurs.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads an AppImage and appimagetool from official project and GitHub release URLs; while the host is not whitelisted, both sources are legitimate and verifiable, and no untrusted remote code execution occurs.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:22
source_x86_64=("https://www.visionaire-studio.net/downloads/out/visionaire-studio-5-linux/${_appimage}" "https://github.com/AppImage/appimagetool/releases/download/continuous/appimagetool-x86_64.AppImage")
PKGBUILD
1 offending line(s) highlighted
1
_pkgname=visionaire-studio
2
3
pkgname="${_pkgname}"-appimage
4
5
# The version can not yet be optained through the AppImage
6
pkgver=5.3.5
7
8
pkgrel=1
9
pkgdesc="Development for P&C games"
10
arch=('x86_64')
11
url="https://www.visionaire-studio.net/"
12
license=('custom')
13
makedepends=('7zip')
14
depends=('zlib' 'fuse2' 'sdl2')
15
options=(!strip)
16
17
# The path to your libSDL2-2.0.so
18
_sdl2_lib_path="/usr/lib/libSDL2-2.0.so"
19
20
_appimage="Visionaire-Studio-x86_64.AppImage"
21
22
source_x86_64=("https://www.visionaire-studio.net/downloads/out/visionaire-studio-5-linux/${_appimage}" "https://github.com/AppImage/appimagetool/releases/download/continuous/appimagetool-x86_64.AppImage")
23
#noextract=("${_appimage}")
24
sha256sums_x86_64=('62a78ce9a1676949acd40fcb9600a92b5f4bae5be0867bcfb8b61089edd1c446'
25
'29348a20b80827cd261c28e95172ff828b69d43d4e4e18e3fd069e2c8693c94e')
26
27
prepare() {
28
# Making the AppImage files executable
29
chmod +x "${_appimage}"
30
chmod +x "appimagetool-x86_64.AppImage"
31
32
# extracting contents of AppImage
33
7z x "${_appimage}"
34
}
35
36
build() {
37
# Setting the sdl2 library path for the AppRun
38
sed -i -E "s|#export SDL_DYNAMIC=/my/actual/libSDL-2.0.so.0|export SDL_DYNAMIC=${_sdl2_lib_path}|" \
39
"AppRun"
40
41
# setting the wm class so the icon would work properly
42
echo StartupWMClass=viseditor >> "${_pkgname}.desktop"
43
44
# Adjusting .desktop so it will work outside of AppImage container
45
sed -i -E "s|Exec=./AppRun.sh|Exec=env DESKTOPINTEGRATION=false ${_pkgname}|" \
46
"${_pkgname}.desktop"
47
}
48
49
50
package() {
51
# recompressing AppImage
52
./appimagetool-x86_64.AppImage -v "${srcdir}"
53
54
# Installing AppImage
55
install -Dm755 "${srcdir}/Visionaire-Studio-x86_64.AppImage" "${pkgdir}/opt/${pkgname}/${pkgname}.AppImage"
56
57
# Installing Licenses
58
install -dm755 "${pkgdir}/opt/${pkgname}/Licenses/"
59
install -Dm644 "${srcdir}/BSD_3_Clause.txt" "${pkgdir}/opt/${pkgname}/Licenses/BSD_3_Clause.txt"
60
install -Dm644 "${srcdir}/LGPL2_1.txt" "${pkgdir}/opt/${pkgname}/Licenses/LGPL2_1.txt"
61
install -Dm644 "${srcdir}/libpng-LICENSE.txt" "${pkgdir}/opt/${pkgname}/Licenses/libpng-LICENSE.txt"
62
install -Dm644 "${srcdir}/MIT.txt" "${pkgdir}/opt/${pkgname}/Licenses/MIT.txt"
63
install -Dm644 "${srcdir}/webm.txt" "${pkgdir}/opt/${pkgname}/Licenses/webm.txt"
64
install -Dm644 "${srcdir}/ZLIB.txt" "${pkgdir}/opt/${pkgname}/Licenses/ZLIB.txt"
65
66
# Installing Desktop file
67
install -Dm644 "${srcdir}/${_pkgname}.desktop" \
68
"${pkgdir}/usr/share/applications/${pkgname}.desktop"
69
70
# Installing Icon images
71
install -dm755 "${pkgdir}/usr/share/icons/hicolor/scalable/apps/"
72
cp "${srcdir}/viseditor.svg" "${pkgdir}/usr/share/icons/hicolor/scalable/apps/"
73
74
# Symlink executable
75
install -dm755 "${pkgdir}/usr/bin"
76
ln -s "/opt/${pkgname}/${pkgname}.AppImage" "${pkgdir}/usr/bin/${_pkgname}"
77
78
# Symlink licenses
79
install -dm755 "${pkgdir}/usr/share/licenses/${pkgname}/"
80
ln -s "/opt/$pkgname/Licenses/BSD_3_Clause.txt" "$pkgdir/usr/share/licenses/$pkgname"
81
ln -s "/opt/$pkgname/Licenses/LGPL2_1.txt" "$pkgdir/usr/share/licenses/$pkgname"
82
ln -s "/opt/$pkgname/Licenses/libpng-LICENSE.txt" "$pkgdir/usr/share/licenses/$pkgname"
83
ln -s "/opt/$pkgname/Licenses/MIT.txt" "$pkgdir/usr/share/licenses/$pkgname"
84
ln -s "/opt/$pkgname/Licenses/webm.txt" "$pkgdir/usr/share/licenses/$pkgname"
85
ln -s "/opt/$pkgname/Licenses/ZLIB.txt" "$pkgdir/usr/share/licenses/$pkgname"
86
}
87
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |