wiiudownloader-bin

maintainer Felitendo · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package installs a prebuilt AppImage from the project's official GitHub releases, which is a common and acceptable practice for AUR packages; while the host is not whitelisted, it is the project's official source, and the AppImage is extracted and installed without further remote execution or obfuscation.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt AppImage from the project's official GitHub releases, which is a common and acceptable practice for AUR packages; while the host is not whitelisted, it is the project's official source, and the AppImage is extracted and installed without further remote execution or obfuscation.

PKGBUILD

      1# Maintainer: Felitendo
    
      2# This PKGBUILD is updated automatically:
    
      3# https://github.com/Felitendo/PKGBUILDS
    
      4
    
      5pkgname=wiiudownloader-bin
    
      6pkgver=2.99
    
      7pkgrel=2
    
      8pkgdesc="Download encrypted Wii U files from Nintendo's official servers (upstream AppImage)"
    
      9arch=('x86_64')
    
      10url="https://github.com/Xpl0itU/WiiUDownloader"
    
      11license=('GPL-3.0-or-later')
    
      12# the AppImage bundles GTK3 and its stack; these are what is left over
    
      13depends=('glibc' 'libx11' 'libxcb' 'wayland' 'fontconfig' 'freetype2'
    
      14         'harfbuzz' 'fribidi' 'zlib' 'bzip2' 'expat' 'libgpg-error'
    
      15         'hicolor-icon-theme')
    
      16provides=('wiiudownloader')
    
      17conflicts=('wiiudownloader')
    
      18options=('!strip' '!debug')
    
      19source=("${pkgname}-${pkgver}.AppImage::${url}/releases/download/v${pkgver}/WiiUDownloader-Linux-x86_64.AppImage")
    
      20noextract=("${pkgname}-${pkgver}.AppImage")
    
      21sha256sums=('3a2e8e7f34a288308666032d6834db00c515a0c897a66a2ae1012702d017f240')
    
      22
    
      23prepare() {
    
      24  chmod +x "$srcdir/${pkgname}-${pkgver}.AppImage"
    
      25  "$srcdir/${pkgname}-${pkgver}.AppImage" --appimage-extract > /dev/null
    
      26}
    
      27
    
      28package() {
    
      29  # upstream's AppImage payload, installed unchanged
    
      30  install -d "$pkgdir/opt/$pkgname"
    
      31  cp -a "$srcdir/squashfs-root/." "$pkgdir/opt/$pkgname/"
    
      32  rm -f "$pkgdir/opt/$pkgname/.DirIcon"
    
      33
    
      34  # AppRun resolves its own directory, so it has to be exec'd by its real
    
      35  # path - a symlink from /usr/bin would make it look next to the symlink
    
      36  install -d "$pkgdir/usr/bin"
    
      37  cat > "$pkgdir/usr/bin/wiiudownloader" << EOF
    
      38#!/bin/sh
    
      39exec /opt/$pkgname/AppRun "\$@"
    
      40EOF
    
      41  chmod 755 "$pkgdir/usr/bin/wiiudownloader"
    
      42
    
      43  install -Dm644 "$srcdir/squashfs-root/usr/share/icons/hicolor/512x512/apps/WiiUDownloader.png" \
    
      44    "$pkgdir/usr/share/icons/hicolor/512x512/apps/wiiudownloader.png"
    
      45  install -Dm644 "$srcdir/squashfs-root/WiiUDownloader.desktop" \
    
      46    "$pkgdir/usr/share/applications/wiiudownloader.desktop"
    
      47  sed -i -e 's|^Exec=.*|Exec=wiiudownloader|' -e 's|^Icon=.*|Icon=wiiudownloader|' \
    
      48    "$pkgdir/usr/share/applications/wiiudownloader.desktop"
    
      49}
    
      50

Changes since previous scan

--- PKGBUILD @ 2026-07-27 00:24
+++ PKGBUILD @ 2026-08-03 00:08
@@ -4,19 +4,47 @@
 
 pkgname=wiiudownloader-bin
 pkgver=2.99
-pkgrel=1
-pkgdesc="Download encrypted Wii U files from Nintendo's official servers (prebuilt)"
+pkgrel=2
+pkgdesc="Download encrypted Wii U files from Nintendo's official servers (upstream AppImage)"
 arch=('x86_64')
 url="https://github.com/Xpl0itU/WiiUDownloader"
 license=('GPL-3.0-or-later')
-depends=('glibc' 'glib2' 'hicolor-icon-theme' 'libx11' 'gtk3' 'gdk-pixbuf2'
-         'cairo' 'pango' 'fontconfig')
+# the AppImage bundles GTK3 and its stack; these are what is left over
+depends=('glibc' 'libx11' 'libxcb' 'wayland' 'fontconfig' 'freetype2'
+         'harfbuzz' 'fribidi' 'zlib' 'bzip2' 'expat' 'libgpg-error'
+         'hicolor-icon-theme')
 provides=('wiiudownloader')
 conflicts=('wiiudownloader')
-source=("${pkgname}-${pkgver}-${pkgrel}.tar.zst::https://github.com/Felitendo/PKGBUILDS/releases/download/${pkgname}-${pkgver}/${pkgname}-${pkgver}.tar.zst")
-sha256sums=('1a43185b07869b8c25b71c3d43ddd829fd79af9d4cf6bfcfddb201f12cf8ff2e')
+options=('!strip' '!debug')
+source=("${pkgname}-${pkgver}.AppImage::${url}/releases/download/v${pkgver}/WiiUDownloader-Linux-x86_64.AppImage")
+noextract=("${pkgname}-${pkgver}.AppImage")
+sha256sums=('3a2e8e7f34a288308666032d6834db00c515a0c897a66a2ae1012702d017f240')
+
+prepare() {
+  chmod +x "$srcdir/${pkgname}-${pkgver}.AppImage"
+  "$srcdir/${pkgname}-${pkgver}.AppImage" --appimage-extract > /dev/null
+}
 
 package() {
-  cp -a "$srcdir/usr" "$pkgdir/"
+  # upstream's AppImage payload, installed unchanged
+  install -d "$pkgdir/opt/$pkgname"
+  cp -a "$srcdir/squashfs-root/." "$pkgdir/opt/$pkgname/"
+  rm -f "$pkgdir/opt/$pkgname/.DirIcon"
+
+  # AppRun resolves its own directory, so it has to be exec'd by its real
+  # path - a symlink from /usr/bin would make it look next to the symlink
+  install -d "$pkgdir/usr/bin"
+  cat > "$pkgdir/usr/bin/wiiudownloader" << EOF
+#!/bin/sh
+exec /opt/$pkgname/AppRun "\$@"
+EOF
+  chmod 755 "$pkgdir/usr/bin/wiiudownloader"
+
+  install -Dm644 "$srcdir/squashfs-root/usr/share/icons/hicolor/512x512/apps/WiiUDownloader.png" \
+    "$pkgdir/usr/share/icons/hicolor/512x512/apps/wiiudownloader.png"
+  install -Dm644 "$srcdir/squashfs-root/WiiUDownloader.desktop" \
+    "$pkgdir/usr/share/applications/wiiudownloader.desktop"
+  sed -i -e 's|^Exec=.*|Exec=wiiudownloader|' -e 's|^Icon=.*|Icon=wiiudownloader|' \
+    "$pkgdir/usr/share/applications/wiiudownloader.desktop"
 }
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 17:35:03	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 19:28:12	LOW	2
2026-07-24 11:27:50	LOW	2
2026-07-24 09:27:42	LOW	2