wine-dwproton

maintainer eeeeei · 1 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds from a git source on a project-owned domain (dawn.wine) and applies publicly visible patches from GitHub; the non-whitelisted host is plausibly official, and no unverifiable prebuilt binaries or malicious payloads are involved.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 90%): The package builds from a git source on a project-owned domain (dawn.wine) and applies publicly visible patches from GitHub; the non-whitelisted host is plausibly official, and no unverifiable prebuilt binaries or malicious payloads are involved.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:15 "git+https://dawn.wine/dawn-winery/wine-dwproton#branch=dwproton/$pkgver-$pkgrel"

PKGBUILD

1 offending line(s) highlighted

      1pkgname=wine-dwproton
    
      2pkgver=11.0
    
      3pkgrel=9
    
      4pkgdesc="dwproton的wine版|dwproton's wine version"
    
      5url="https://dawn.wine/dawn-winery/wine-dwproton"
    
      6arch=("x86_64")
    
      7provides=(
    
      8  "wine=$pkgver"
    
      9  "wine-staging=$pkgver"
    
      10  "wine-wow64=$pkgver"
    
      11  "wine-dwproton=$pkgver"
    
      12)
    
      13conflicts=("wine")
    
      14source=(
    
      15    "git+https://dawn.wine/dawn-winery/wine-dwproton#branch=dwproton/$pkgver-$pkgrel"
    
      16    https://github.com/irtkll/wine-proton-patch/raw/main/恢复字体.patch
    
      17    https://github.com/irtkll/wine-proton-patch/raw/main/还原部分wine功能.patch
    
      18    https://github.com/irtkll/wine-proton-patch/raw/main/修复任务栏的图标问题.patch
    
      19    https://github.com/NelloKudo/spritz-wine/raw/master/patches/0001-spritz/0003-programs-Add-Steam.exe-stub-from-Proton.patch
    
      20)
    
      21sha256sums=('SKIP'
    
      22            '1650786c3c108841371b39edcc2868ea56b4cf4f8c57320f4a49c79ed49a687e'
    
      23            '5fc91749290610be0f313ab8c1b110ead12715e68447484198a38990cda661ae'
    
      24            '53c071efa60bf49b5c646d787d7f090cf97ffbe28c9aebdbe78daace34f8c4cc'
    
      25            '1e0ef2d38a64608773a80eae333abcaabe8be4bb9763524e15bea592d82c3556')
    
      26prepare(){
    
      27    cd "$pkgname"
    
      28    for src in "${source[@]}"; do
    
      29        src="${src%%::*}"
    
      30        src="${src##*/}"
    
      31        src="${src%.zst}"
    
      32        [[ $src = *.patch ]] || continue
    
      33        msg2 "应用补丁 $src..."
    
      34        git apply -p1 -C1 < "../$src" || msg2 "应用补丁 $src 失败，但继续进行..."
    
      35    done
    
      36    ./autogen.sh
    
      37    ./configure --enable-archs=i386,x86_64 --disable-tests --prefix=/usr
    
      38}
    
      39build(){
    
      40    cd "$pkgname"
    
      41    make -j$(nproc)
    
      42}
    
      43package(){
    
      44    cd "$pkgname"
    
      45    make DESTDIR="$pkgdir" install
    
      46}
    
      47

Changes since previous scan

--- PKGBUILD @ 2026-07-26 00:07
+++ PKGBUILD @ 2026-08-03 00:08
@@ -1,7 +1,7 @@
 pkgname=wine-dwproton
 pkgver=11.0
 pkgrel=9
-pkgdesc="dwproton的wine版"
+pkgdesc="dwproton的wine版|dwproton's wine version"
 url="https://dawn.wine/dawn-winery/wine-dwproton"
 arch=("x86_64")
 provides=(
@@ -15,11 +15,13 @@
     "git+https://dawn.wine/dawn-winery/wine-dwproton#branch=dwproton/$pkgver-$pkgrel"
     https://github.com/irtkll/wine-proton-patch/raw/main/恢复字体.patch
     https://github.com/irtkll/wine-proton-patch/raw/main/还原部分wine功能.patch
+    https://github.com/irtkll/wine-proton-patch/raw/main/修复任务栏的图标问题.patch
     https://github.com/NelloKudo/spritz-wine/raw/master/patches/0001-spritz/0003-programs-Add-Steam.exe-stub-from-Proton.patch
 )
 sha256sums=('SKIP'
             '1650786c3c108841371b39edcc2868ea56b4cf4f8c57320f4a49c79ed49a687e'
             '5fc91749290610be0f313ab8c1b110ead12715e68447484198a38990cda661ae'
+            '53c071efa60bf49b5c646d787d7f090cf97ffbe28c9aebdbe78daace34f8c4cc'
             '1e0ef2d38a64608773a80eae333abcaabe8be4bb9763524e15bea592d82c3556')
 prepare(){
     cd "$pkgname"

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	3
2026-07-31 00:14:10	LOW	3
2026-07-30 00:17:23	LOW	3
2026-07-29 00:25:53	LOW	3
2026-07-28 00:07:28	LOW	3
2026-07-27 00:24:32	LOW	3
2026-07-26 05:31:42	MEDIUM	2
2026-07-26 00:07:32	LOW	3
2026-07-25 13:29:48	MEDIUM	2
2026-07-25 00:13:44	LOW	3
2026-07-24 05:27:22	MEDIUM	2
2026-07-24 00:02:28	LOW	3
2026-07-23 00:14:47	LOW	3
2026-07-22 00:29:32	LOW	3
2026-07-21 00:24:15	LOW	3
2026-07-20 00:19:49	LOW	3
2026-07-19 05:10:21	MEDIUM	2
2026-07-19 00:17:08	LOW	3