wolfenstein3d

maintainer besisland · 16 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package downloads the original game data from a plausible official source (3D Realms' FTP) which is not on the whitelist but is a known historical host for the game; the content is non-executable game assets run via dosbox, posing no code execution risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads the original game data from a plausible official source (3D Realms' FTP) which is not on the whitelist but is a known historical host for the game; the content is non-executable game assets run via dosbox, posing no code execution risk.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:14 'ftp://ftp.3drealms.com/share/1wolf14.zip' \

PKGBUILD

1 offending line(s) highlighted
1# Contributor: Denys Popov <denys@denyspopov.biz>
2
3pkgname=wolfenstein3d
4pkgver=1.4
5pkgrel=3
6pkgdesc="Wolfenstein 3D, cult first person shooter video game from id Software and Apogee"
7arch=(any)
8url="https://en.wikipedia.org/wiki/Wolfenstein_3D"
9license=('custom')
10depends=('dosbox')
11makedepends=('unzip')
12source=(\
13 'LICENSE'
14 'ftp://ftp.3drealms.com/share/1wolf14.zip' \
15 'setup.cfg' \
16 'dosbox-install.conf' \
17 'dosbox.conf' \
18 'runme' \
19 'wolfenstein3d.desktop' \
20 'wolfenstein3d.png' \
21)
22sha256sums=(\
23 'daf535328cb428bba937ffde5db99db18f2b9eac338cb213f8ea1dda7e2f8d9e' \
24 'cb2a2ef7ecef14152c65ff93cc3b84fbd3e8eb0c5c1de41a6fc8cdef559451a8' \
25 '6aaa1aa340338149ac104f66db998ccb7cebdf14db4fc24d2d51a8fa192e10b0' \
26 'bd10ed1e5d0017e10dbd949cd3d6180f6210c6b795962e355a46c8eb46dc9558' \
27 '5a3c5e5a5d65614d90b92174f4318cee5631ec9fbaeda480d8740b79f145a422' \
28 'eaa4ff9fb046685a38e368dbd70424d3ec3660f85e02cbbe4099b909f9a7a804' \
29 'ecc61d3754c7a1c2d7547f029f5b456e3efafcbb73b30d843287905b48ead1d6' \
30 'e16be2fb5546bc8b46e1cb11c0143172a8f765d92d19c4c7bbbdf4ce191e4ba9' \
31)
32
33build() {
34 cd "${srcdir}"
35
36 mkdir install
37 mkdir install/wolf3d
38 unzip 1wolf14.zip -d install
39 cp setup.cfg install/
40 dosbox -conf dosbox-install.conf
41}
42
43package() {
44 install -d ${pkgdir}/opt/wolfenstein3d
45 install -m 0644 install/wolf3d/* ${pkgdir}/opt/wolfenstein3d/
46 install -m 0644 dosbox.conf ${pkgdir}/opt/wolfenstein3d/dosbox.conf
47 install -m 0755 runme ${pkgdir}/opt/wolfenstein3d/runme
48
49 install -D -m 0644 wolfenstein3d.desktop ${pkgdir}/usr/share/applications/wolfenstein3d.desktop
50 install -D -m 0644 wolfenstein3d.png ${pkgdir}/usr/share/pixmaps/wolfenstein3d.png
51
52 install -D -m 0644 LICENSE ${pkgdir}/usr/share/licenses/${pkgname}/LICENSE
53}
54

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion