wine-cachyos-mr10060
maintainer sun2nic
· 0 votes
· scanned 2026-08-18 00:03:42.021799
LOW
View on AUR ↗
Why flagged
The flagged non-standard host source is a local bundled patch file ('mr10060-wine-cachyos-${_patchver}.patch') with no URL, applied to the official CachyOS Wine git source; all remote downloads come from official project infrastructure (GitHub, dl.winehq.org); the package is a legitimate Wine fork build with checksums provided, posing no meaningful security risk beyond being a low-vote, recently uploaded AUR package.
Triggered rules
LOW
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 70%): The flagged non-standard host source is a local bundled patch file ('mr10060-wine-cachyos-${_patchver}.patch') with no URL, applied to the official CachyOS Wine git source; all remote downloads come from official project infrastructure (GitHub, dl.winehq.org); the package is a legitimate Wine fork build with checksums provided, posing no meaningful security risk beyond being a low-vote, recently uploaded AUR package.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:113
"https://dl.winehq.org/wine/wine-gecko/${_geckover}/wine-gecko-${_geckover}-x86.tar.xz"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: sun2nic
2
# Based on the wine-cachyos AUR package maintained by loathingkernel.
3
# MR rebase: https://gitlab.winehq.org/wine/wine/-/merge_requests/10060
4
5
pkgname=wine-cachyos-mr10060
6
_pkgsrc=wine-cachyos
7
_srctag=10.0-20260425
8
pkgver=${_srctag//-/.}
9
pkgrel=1
10
epoch=2
11
pkgdesc="Wine with CachyOS patches (loathingkernel) and XDG Desktop Portal file dialogs (Wine MR !10060)"
12
url="https://github.com/CachyOS/wine-cachyos"
13
arch=(x86_64)
14
license=(LGPL-2.1-or-later)
15
options=(!staticlibs !lto !debug pestrip)
16
install=wine.install
17
18
_geckover=2.47.4
19
_monover=10.4.1
20
_xaliaver=0.4.8
21
_patchver=10.0.20260425
22
23
depends=(
24
attr
25
dbus
26
desktop-file-utils
27
fontconfig
28
freetype2
29
gettext
30
glib2
31
glibc
32
libgcc
33
libpcap
34
libunwind
35
libx11
36
libxcursor
37
libxext
38
libxi
39
libxkbcommon
40
libxrandr
41
systemd-libs
42
wayland
43
)
44
makedepends=(
45
alsa-lib
46
ffmpeg
47
git
48
gnutls
49
gst-plugins-base-libs
50
libcups
51
libgphoto2
52
libpulse
53
libva
54
libxcomposite
55
libxinerama
56
libxxf86vm
57
mesa
58
mingw-w64-gcc
59
opencl-headers
60
ocl-icd
61
pcsclite
62
perl
63
python
64
samba
65
sane
66
sdl2-compat
67
unixodbc
68
unzip
69
v4l-utils
70
vulkan-headers
71
vulkan-icd-loader
72
)
73
optdepends=(
74
'xdg-desktop-portal: XDG desktop portal service for the patched file dialogs'
75
'alsa-lib: ALSA audio support'
76
'alsa-plugins: additional ALSA formats and output'
77
'cups: printing support'
78
'dosbox: MS-DOS application support'
79
'ffmpeg: audio and video codecs'
80
'gnutls: encrypted communications support'
81
'gst-plugins-bad: additional GStreamer codecs'
82
'gst-plugins-base: basic GStreamer codecs'
83
'gst-plugins-base-libs: basic GStreamer libraries'
84
'gst-plugins-good: additional GStreamer codecs'
85
'gst-plugins-ugly: additional GStreamer codecs'
86
'gstreamer: multimedia support'
87
'libgphoto2: digital camera support'
88
'libpulse: PulseAudio support'
89
'libusb: USB device support'
90
'libva: hardware video acceleration'
91
'libxcomposite: X11 compositing support'
92
'libxinerama: multihead X11 support'
93
'ocl-icd: OpenCL support'
94
'pcsclite: smart card support'
95
'perl: Winemaker support'
96
'samba: SMB support'
97
'sane: scanner support'
98
'sdl2-compat: SDL support'
99
'unixodbc: ODBC support'
100
'v4l-utils: video capture support'
101
'vulkan-icd-loader: Vulkan support'
102
)
103
provides=(
104
"wine=10.0"
105
"wine-cachyos=$pkgver"
106
wine-mono
107
wine-gecko
108
)
109
conflicts=(wine wine-cachyos wine-mono wine-gecko)
110
111
source=(
112
"${_pkgsrc}::git+https://github.com/CachyOS/wine-cachyos.git#tag=cachyos-${_srctag}-wine"
113
"https://dl.winehq.org/wine/wine-gecko/${_geckover}/wine-gecko-${_geckover}-x86.tar.xz"
114
"https://dl.winehq.org/wine/wine-gecko/${_geckover}/wine-gecko-${_geckover}-x86_64.tar.xz"
115
"https://github.com/madewokherd/wine-mono/releases/download/wine-mono-${_monover}/wine-mono-${_monover}-x86.tar.xz"
116
"https://github.com/madewokherd/xalia/releases/download/xalia-${_xaliaver}/xalia-${_xaliaver}-net48-mono.zip"
117
"mr10060-wine-cachyos-${_patchver}.patch"
118
30-win32-aliases.conf
119
wine-binfmt.conf
120
ntsync.conf
121
)
122
noextract=("xalia-${_xaliaver}-net48-mono.zip")
123
b2sums=(
124
'0b3f2fcc68b5f1922f4bd3381f9affdd985b06759ed9402a3685659ccc693b615842a5b70317aa98341871fa942263442ba539f33bfe6cbfd7f0db53c7b05778'
125
'2a73c12585b502ae11188482cbc9fb1f45f95bfe4383a7615011104b132f4845f9813d01fb40277e1934fab5f1b35ab40b4f4a66a9967463dd1d666a666904e9'
126
'62856a88266b4757602c0646e024f832974a93f03b9df253fd4895d4f11a41b435840ad8f7003ec85a0d8087dec15f2e096dbfb4b01ebe4d365521e48fd0c5c0'
127
'9ca53dee272470806432c61587080e6dc04fd9eaafde4f55f5d57d5557ec6859d77a74b74c9e3f472da04b8ace9609f0927573faab368a25249c76b3e37e65c1'
128
'0780740dd2f07de5c00e0c8d1823bc24e31954d6ccb7875678957aea5e095d5eb8dc13ea9cc56a00abfccdcad59e21150e49fe515815f50e0bd38b50f6ec940c'
129
'40412a84d76363fc22ad583e4ee901262db809cb95b1e338cb70d899e29512ab40e8212c29fdef39b9241cc241104abadba3a70e2b713bcea47f5b3255bee197'
130
'45db34fb35a679dc191b4119603eba37b8008326bd4f7d6bd422fbbb2a74b675bdbc9f0cc6995ed0c564cf088b7ecd9fbe2d06d42ff8a4464828f3c4f188075b'
131
'e9de76a32493c601ab32bde28a2c8f8aded12978057159dd9bf35eefbf82f2389a4d5e30170218956101331cf3e7452ae82ad0db6aad623651b0cc2174a61588'
132
'964a3ba277821e570aec2127f0d1ae9898da6976c360deb6b196345a50bd3c2c55cb399527507006d8fddef868069032a30b083f23987d5050f185c74dd9de35'
133
)
134
135
prepare() {
136
local _builddir="${_pkgsrc}-64-build"
137
138
rm -rf "$srcdir/$_builddir"
139
mkdir "$srcdir/$_builddir"
140
141
cd "$srcdir/$_pkgsrc"
142
git apply --check "$srcdir/mr10060-wine-cachyos-${_patchver}.patch"
143
git apply "$srcdir/mr10060-wine-cachyos-${_patchver}.patch"
144
145
git config user.email "wine@cachyos.org"
146
git config user.name "wine cachyos"
147
git tag "wine-${_srctag}" --annotate -m "$pkgver" --force
148
./tools/make_requests
149
./tools/make_specfiles
150
./dlls/winevulkan/make_vulkan -x vk.xml -X video.xml
151
autoreconf -fiv
152
rm -rf autom4te.cache
153
}
154
155
build() {
156
local -a split=($CFLAGS)
157
local -A flags
158
local opt
159
for opt in "${split[@]}"; do flags["${opt%%=*}"]="${opt##*=}"; done
160
161
local march="${flags["-march"]:-nocona}"
162
local mtune="${flags["-mtune"]:-core-avx2}"
163
local optimize_flags="-O2 -march=$march -mtune=$mtune -mfpmath=sse -pipe"
164
optimize_flags+=" -mno-avx -mno-avx2 -mno-avx512f -fvect-cost-model=cheap -fipa-pta"
165
local sanity_flags="-fwrapv -fno-strict-aliasing -D_TIME_BITS=64 -D_FILE_OFFSET_BITS=64"
166
local debug_flags="-ffunction-sections -fdata-sections -fno-omit-frame-pointer"
167
local warning_flags="-Wno-incompatible-pointer-types"
168
local strip_flags="-s"
169
local common_flags="$optimize_flags $sanity_flags $debug_flags $warning_flags $strip_flags"
170
local common_ldflags="-Wl,-O1,--sort-common,--as-needed"
171
172
export LDFLAGS="$common_ldflags"
173
export CROSSLDFLAGS="$common_ldflags -Wl,--file-alignment,4096"
174
export CFLAGS="$common_flags -mcmodel=small"
175
export CXXFLAGS="$common_flags -mcmodel=small -std=c++17"
176
export CROSSCFLAGS="$common_flags"
177
export CROSSCXXFLAGS="$common_flags -std=c++17"
178
export PKG_CONFIG_PATH="/usr/lib/pkgconfig:/usr/share/pkgconfig"
179
180
cd "$srcdir/${_pkgsrc}-64-build"
181
"../$_pkgsrc/configure" \
182
--prefix=/usr \
183
--libdir=/usr/lib \
184
--with-x \
185
--with-wayland \
186
--with-gstreamer \
187
--with-freetype \
188
--with-mingw \
189
--with-alsa \
190
--with-ffmpeg \
191
--without-oss \
192
--disable-lsteamclient \
193
--disable-tests \
194
--enable-archs=x86_64,i386 \
195
--enable-build-id
196
197
make
198
}
199
200
package() {
201
cd "$srcdir/${_pkgsrc}-64-build"
202
make prefix="$pkgdir/usr" \
203
libdir="$pkgdir/usr/lib" \
204
dlldir="$pkgdir/usr/lib/wine" install
205
206
install -d "$pkgdir"/usr/share/fontconfig/conf.{avail,default}
207
install -m644 "$srcdir/30-win32-aliases.conf" "$pkgdir/usr/share/fontconfig/conf.avail"
208
ln -s ../conf.avail/30-win32-aliases.conf "$pkgdir/usr/share/fontconfig/conf.default/30-win32-aliases.conf"
209
install -Dm644 "$srcdir/wine-binfmt.conf" "$pkgdir/usr/lib/binfmt.d/wine.conf"
210
211
i686-w64-mingw32-strip --strip-unneeded "$pkgdir"/usr/lib/wine/i386-windows/*.{dll,exe,cpl}
212
x86_64-w64-mingw32-strip --strip-unneeded "$pkgdir"/usr/lib/wine/x86_64-windows/*.{dll,exe,cpl}
213
214
install -Dm644 "$srcdir/ntsync.conf" "$pkgdir/usr/lib/modules-load.d/10-$pkgname.conf"
215
216
install -d -m755 "$pkgdir/usr/share/wine/gecko"
217
cp -dr --no-preserve=ownership "$srcdir"/wine-gecko-${_geckover}-x86{,_64} "$pkgdir/usr/share/wine/gecko/"
218
219
install -d -m755 "$pkgdir/usr/share/wine/mono"
220
cp -ra --no-preserve=ownership "$srcdir/wine-mono-${_monover}" "$pkgdir/usr/share/wine/mono/"
221
222
install -d -m755 "$pkgdir/usr/share/xalia"
223
unzip "$srcdir/xalia-${_xaliaver}-net48-mono.zip" -d "$pkgdir/usr/share/xalia"
224
chmod -R go-w "$pkgdir/usr/share/xalia"
225
}
226
227
# vim:set ts=8 sts=2 sw=2 et:
228
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-18 00:03:42 | LOW | 3 |
| 2026-08-17 00:18:29 | LOW | 3 |
| 2026-08-16 00:03:42 | LOW | 3 |
| 2026-08-15 00:26:13 | LOW | 3 |
| 2026-08-14 00:03:41 | LOW | 3 |
| 2026-08-13 00:17:07 | LOW | 3 |
| 2026-08-12 15:27:13 | LOW | 3 |
| 2026-08-12 15:24:23 | MEDIUM | 2 |