warfork

LOW
maintainer orphaned 3 votes scanned 2026-09-17 00:27:14.276658
View on AUR
Why flagged

The package downloads a source tarball from the project's official domain (warfork.com) which is not on the whitelist but is plausibly the project's own; the tarball contains the game's binaries and data, and no untrusted remote code execution occurs during build or install.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a source tarball from the project's official domain (warfork.com) which is not on the whitelist but is plausibly the project's own; the tarball contains the game's binaries and data, and no untrusted remote code execution occurs during build or install.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:26 "https://warfork.com/downloads/warfork_${_relver}_unified.tar")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Gelmo <gelmo[at]outlook.com>
2# Contributor: Sven-Hendrik Haase <sh@lutzhaase.com>
3# Contributor: Slash <demodevil5[at]yahoo[dot]com>
4# Contributor: Babets
5# Contributor: Vain
6# Contributor: Aleksej Komarov <stylemistake@gmail.com>
7
8pkgname='warfork'
9pkgver=21.03.04
10pkgrel=2
11_relver=6331778_Mar_04_2021
12pkgdesc='Free online multiplayer competitive FPS based on the Qfusion engine'
13url='https://www.warfork.com/'
14license=('GPL2')
15arch=('x86_64')
16depends=('sdl2' 'libjpeg' 'libpng' 'curl' 'libvorbis' 'freetype2'
17 'libxinerama' 'libxxf86vm' 'libxrandr' 'libtheora' 'libxi')
18makedepends=('imagemagick' 'gendesk')
19optdepends=('openal: for openal audio support')
20provides=('warfork')
21conflicts=('warfork')
22source=('warfork.png'
23 'warfork.launcher'
24 'wf-server.launcher'
25 'wftv-server.launcher'
26 "https://warfork.com/downloads/warfork_${_relver}_unified.tar")
27sha512sums=('f78af226cad17ff9eaeebeafd754bb35f10549abede755f4fa9d6616118003877f036f3329b490a9c342267fdda4eaffde926878bf1d24c33488f0a02d4bc697'
28 '073959aebd70807b893d474c7005341356f974acc573eae49eb2d23273068318ee855ccaeb0a037caf9a7a4ce545927b939f3b31d996384f56a90b54ff2cd5c0'
29 '9fd472b186477259270aecef8456b72db51a3f7f161280b23633f25a5169f3d3ada7583aff50e7510df08f9b38514d77420adef5f761365e1b9aa29737f1c1c4'
30 '10952bc4e123c0d75d492761b505a3b1ddf6c8e27143bf25bbb0e28dede5b44238849a96542345f9e068aaf442b0df4859f23b6e18049e7dfc94535e7aaefc65'
31 '7629c21ffe55449aa2cf8c735757d4d4c2a43f265233f4aabd61ed3f863855bf703294e72cf9a45ea0b477cde940d72be8da7cf0f67621d00c74b1286d83cbc0')
32
33prepare() {
34 gendesk -n -f --pkgname 'warfork' --pkgdesc "${pkgdesc}" --name 'Warfork' --categories 'Game;ActionGame;Shooter'
35}
36
37package() {
38
39 install -Dm755 fvi-launcher/applications/warfork/Warfork.app/Contents/Resources/wf_server.x86_64 "${pkgdir}/opt/warfork/wf_server.x86_64"
40 install -Dm755 fvi-launcher/applications/warfork/Warfork.app/Contents/Resources/wftv_server.x86_64 "${pkgdir}/opt/warfork/wftv_server.x86_64"
41 install -Dm755 fvi-launcher/applications/warfork/Warfork.app/Contents/Resources/warfork.x86_64 "${pkgdir}/opt/warfork/warfork.x86_64"
42 install -Dm755 fvi-launcher/applications/warfork/Warfork.app/Contents/Resources/warfork.x86_64 "${pkgdir}/opt/warfork/warfork"
43
44 cp -a fvi-launcher/applications/warfork/Warfork.app/Contents/Resources/{basewf,libs} "${pkgdir}/opt/warfork/"
45
46 find "${pkgdir}/opt/warfork"/{basewf,libs} -type d | xargs chmod 755
47 find "${pkgdir}/opt/warfork"/{basewf,libs} -type f | xargs chmod 644
48
49 # Install launchers to /usr/bin
50 install -D -m 0755 "${srcdir}/warfork.launcher" "${pkgdir}/usr/bin/warfork"
51 install -D -m 0755 "${srcdir}/wf-server.launcher" "${pkgdir}/usr/bin/wf-server"
52 install -D -m 0755 "${srcdir}/wftv-server.launcher" "${pkgdir}/usr/bin/wftv-server"
53
54 # Install the menu entry
55 install -D -m 0644 "${srcdir}/warfork.desktop" "${pkgdir}/usr/share/applications/warfork.desktop"
56
57 # Install the launcher icon
58 install -D -m 0644 "${srcdir}/warfork.png" "${pkgdir}/usr/share/pixmaps/warfork.png"
59}
60
61# vim: ts=2 sts=2 et:
62

Scan history

Scanned at (UTC)SeverityRules
2026-09-17 00:27:14 Low 2
2026-09-16 00:03:17 Low 2
2026-09-15 00:25:31 Low 2
2026-09-14 00:27:57 Low 2
2026-09-13 00:19:54 Low 2
2026-09-12 00:25:17 Low 2
2026-09-11 00:19:22 Low 2
2026-09-10 00:22:44 Low 2
2026-09-09 00:04:09 Low 2
2026-09-08 00:18:08 Low 2
2026-09-07 00:30:15 Low 2
2026-09-06 00:17:06 Low 2
2026-09-05 00:16:27 Low 2
2026-09-04 00:03:13 Low 2
2026-09-03 00:15:47 Low 2
2026-09-02 00:02:31 Low 2
2026-09-01 00:11:19 Low 2
2026-08-31 00:19:57 Low 2
2026-08-30 00:04:14 Low 2
2026-08-29 00:29:17 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion