wine-dwproton

LOW

maintainer eeeeei 1 votes scanned 2026-11-03 00:01:00.954084

View on AUR

Why flagged

The package builds from a git repository on a project-owned domain (dawn.wine) and applies publicly visible patch files from GitHub; the non-whitelisted host is plausibly official, and no unverifiable prebuilt binaries or malicious payloads are involved.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from a git repository on a project-owned domain (dawn.wine) and applies publicly visible patch files from GitHub; the non-whitelisted host is plausibly official, and no unverifiable prebuilt binaries or malicious payloads are involved.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:16 "git+https://dawn.wine/dawn-winery/wine-dwproton#branch=dwproton/$pkgver-$pkgrel"

PKGBUILD

1 offending line(s) highlighted

      1pkgname=wine-dwproton
    
      2pkgver=11.0
    
      3pkgrel=11
    
      4pkgdesc="dwproton的wine版|dwproton's wine version"
    
      5url="https://dawn.wine/dawn-winery/wine-dwproton"
    
      6arch=("x86_64")
    
      7makedepends=(mingw-w64-gcc make)
    
      8provides=(
    
      9  "wine=$pkgver"
    
      10  "wine-staging=$pkgver"
    
      11  "wine-wow64=$pkgver"
    
      12  "wine-dwproton=$pkgver"
    
      13)
    
      14conflicts=("wine")
    
      15source=(
    
      16    "git+https://dawn.wine/dawn-winery/wine-dwproton#branch=dwproton/$pkgver-$pkgrel"
    
      17    https://github.com/irtkll/wine-proton-patch/raw/main/恢复字体.patch
    
      18    https://github.com/irtkll/wine-proton-patch/raw/main/还原部分wine功能.patch
    
      19    https://github.com/irtkll/wine-proton-patch/raw/main/修复任务栏的图标问题.patch
    
      20    https://github.com/NelloKudo/spritz-wine/raw/master/patches/0001-spritz/0003-programs-Add-Steam.exe-stub-from-Proton.patch
    
      21)
    
      22sha256sums=('SKIP'
    
      23            '1650786c3c108841371b39edcc2868ea56b4cf4f8c57320f4a49c79ed49a687e'
    
      24            '5fc91749290610be0f313ab8c1b110ead12715e68447484198a38990cda661ae'
    
      25            '53c071efa60bf49b5c646d787d7f090cf97ffbe28c9aebdbe78daace34f8c4cc'
    
      26            '1e0ef2d38a64608773a80eae333abcaabe8be4bb9763524e15bea592d82c3556')
    
      27prepare(){
    
      28    cd "$pkgname"
    
      29    for src in "${source[@]}"; do
    
      30        src="${src%%::*}"
    
      31        src="${src##*/}"
    
      32        src="${src%.zst}"
    
      33        [[ $src = *.patch ]] || continue
    
      34        msg2 "应用补丁 $src..."
    
      35        git apply -p1 -C1 < "../$src" || msg2 "应用补丁 $src 失败，但继续进行..."
    
      36    done
    
      37    ./autogen.sh
    
      38    ./configure --enable-archs=i386,x86_64 --disable-tests --prefix=/usr
    
      39}
    
      40build(){
    
      41    cd "$pkgname"
    
      42    make -j$(nproc)
    
      43}
    
      44package(){
    
      45    cd "$pkgname"
    
      46    make DESTDIR="$pkgdir" install
    
      47}
    
      48

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-03 00:01:00	Low	2
2026-11-02 00:26:00	Low	2
2026-11-01 00:21:48	Low	2
2026-10-31 00:07:41	Low	2
2026-10-30 00:29:30	Low	2
2026-10-29 00:13:55	Low	2
2026-10-28 00:06:54	Low	2
2026-10-27 00:23:28	Low	2
2026-10-26 00:12:40	Low	2
2026-10-25 00:20:48	Low	2
2026-10-24 00:14:55	Low	2
2026-10-23 00:02:19	Low	2
2026-10-22 00:13:10	Low	2
2026-10-21 00:12:50	Low	2
2026-10-20 00:10:31	Low	2
2026-10-19 00:03:55	Low	2
2026-10-18 00:06:55	Low	2
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2