warfork

maintainer orphaned · 3 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads a source tarball from the project's official domain (warfork.com) which is not on the whitelist but is plausibly the project's own; the tarball contains the game's binaries and data, and no untrusted remote code execution occurs during build or install.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a source tarball from the project's official domain (warfork.com) which is not on the whitelist but is plausibly the project's own; the tarball contains the game's binaries and data, and no untrusted remote code execution occurs during build or install.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:26 "https://warfork.com/downloads/warfork_${_relver}_unified.tar")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Gelmo <gelmo[at]outlook.com>
    
      2# Contributor: Sven-Hendrik Haase <sh@lutzhaase.com>
    
      3# Contributor: Slash <demodevil5[at]yahoo[dot]com>
    
      4# Contributor: Babets
    
      5# Contributor: Vain
    
      6# Contributor: Aleksej Komarov <stylemistake@gmail.com>
    
      7
    
      8pkgname='warfork'
    
      9pkgver=21.03.04
    
      10pkgrel=2
    
      11_relver=6331778_Mar_04_2021
    
      12pkgdesc='Free online multiplayer competitive FPS based on the Qfusion engine'
    
      13url='https://www.warfork.com/'
    
      14license=('GPL2')
    
      15arch=('x86_64')
    
      16depends=('sdl2' 'libjpeg' 'libpng' 'curl' 'libvorbis' 'freetype2'
    
      17         'libxinerama' 'libxxf86vm' 'libxrandr' 'libtheora' 'libxi')
    
      18makedepends=('imagemagick' 'gendesk')
    
      19optdepends=('openal: for openal audio support')
    
      20provides=('warfork')
    
      21conflicts=('warfork')
    
      22source=('warfork.png'
    
      23        'warfork.launcher'
    
      24        'wf-server.launcher'
    
      25        'wftv-server.launcher'
    
      26        "https://warfork.com/downloads/warfork_${_relver}_unified.tar")
    
      27sha512sums=('f78af226cad17ff9eaeebeafd754bb35f10549abede755f4fa9d6616118003877f036f3329b490a9c342267fdda4eaffde926878bf1d24c33488f0a02d4bc697'
    
      28            '073959aebd70807b893d474c7005341356f974acc573eae49eb2d23273068318ee855ccaeb0a037caf9a7a4ce545927b939f3b31d996384f56a90b54ff2cd5c0'
    
      29            '9fd472b186477259270aecef8456b72db51a3f7f161280b23633f25a5169f3d3ada7583aff50e7510df08f9b38514d77420adef5f761365e1b9aa29737f1c1c4'
    
      30            '10952bc4e123c0d75d492761b505a3b1ddf6c8e27143bf25bbb0e28dede5b44238849a96542345f9e068aaf442b0df4859f23b6e18049e7dfc94535e7aaefc65'
    
      31            '7629c21ffe55449aa2cf8c735757d4d4c2a43f265233f4aabd61ed3f863855bf703294e72cf9a45ea0b477cde940d72be8da7cf0f67621d00c74b1286d83cbc0')
    
      32
    
      33prepare() {
    
      34  gendesk -n -f --pkgname 'warfork' --pkgdesc "${pkgdesc}" --name 'Warfork' --categories 'Game;ActionGame;Shooter'
    
      35}
    
      36
    
      37package() {
    
      38
    
      39  install -Dm755 fvi-launcher/applications/warfork/Warfork.app/Contents/Resources/wf_server.x86_64 "${pkgdir}/opt/warfork/wf_server.x86_64"
    
      40  install -Dm755 fvi-launcher/applications/warfork/Warfork.app/Contents/Resources/wftv_server.x86_64 "${pkgdir}/opt/warfork/wftv_server.x86_64"
    
      41  install -Dm755 fvi-launcher/applications/warfork/Warfork.app/Contents/Resources/warfork.x86_64 "${pkgdir}/opt/warfork/warfork.x86_64"
    
      42  install -Dm755 fvi-launcher/applications/warfork/Warfork.app/Contents/Resources/warfork.x86_64 "${pkgdir}/opt/warfork/warfork"
    
      43
    
      44  cp -a fvi-launcher/applications/warfork/Warfork.app/Contents/Resources/{basewf,libs} "${pkgdir}/opt/warfork/"
    
      45
    
      46  find "${pkgdir}/opt/warfork"/{basewf,libs} -type d | xargs chmod 755
    
      47  find "${pkgdir}/opt/warfork"/{basewf,libs} -type f | xargs chmod 644
    
      48
    
      49  # Install launchers to /usr/bin
    
      50  install -D -m 0755 "${srcdir}/warfork.launcher" "${pkgdir}/usr/bin/warfork"
    
      51  install -D -m 0755 "${srcdir}/wf-server.launcher" "${pkgdir}/usr/bin/wf-server"
    
      52  install -D -m 0755 "${srcdir}/wftv-server.launcher" "${pkgdir}/usr/bin/wftv-server"
    
      53
    
      54  # Install the menu entry
    
      55  install -D -m 0644 "${srcdir}/warfork.desktop" "${pkgdir}/usr/share/applications/warfork.desktop"
    
      56
    
      57  # Install the launcher icon
    
      58  install -D -m 0644 "${srcdir}/warfork.png" "${pkgdir}/usr/share/pixmaps/warfork.png"
    
      59}
    
      60
    
      61# vim: ts=2 sts=2 et:
    
      62

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2