wolfenstein3d
The package downloads the original game data from a plausible official source (3D Realms' FTP) which is not on the whitelist but is a known historical host for the game; the content is non-executable game assets run via dosbox, posing no code execution risk.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads the original game data from a plausible official source (3D Realms' FTP) which is not on the whitelist but is a known historical host for the game; the content is non-executable game assets run via dosbox, posing no code execution risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:14
'ftp://ftp.3drealms.com/share/1wolf14.zip' \
PKGBUILD
1 offending line(s) highlighted# Contributor: Denys Popov <denys@denyspopov.biz>
pkgname=wolfenstein3d
pkgver=1.4
pkgrel=3
pkgdesc="Wolfenstein 3D, cult first person shooter video game from id Software and Apogee"
arch=(any)
url="https://en.wikipedia.org/wiki/Wolfenstein_3D"
license=('custom')
depends=('dosbox')
makedepends=('unzip')
source=(\
'LICENSE'
'ftp://ftp.3drealms.com/share/1wolf14.zip' \
'setup.cfg' \
'dosbox-install.conf' \
'dosbox.conf' \
'runme' \
'wolfenstein3d.desktop' \
'wolfenstein3d.png' \
)
sha256sums=(\
'daf535328cb428bba937ffde5db99db18f2b9eac338cb213f8ea1dda7e2f8d9e' \
'cb2a2ef7ecef14152c65ff93cc3b84fbd3e8eb0c5c1de41a6fc8cdef559451a8' \
'6aaa1aa340338149ac104f66db998ccb7cebdf14db4fc24d2d51a8fa192e10b0' \
'bd10ed1e5d0017e10dbd949cd3d6180f6210c6b795962e355a46c8eb46dc9558' \
'5a3c5e5a5d65614d90b92174f4318cee5631ec9fbaeda480d8740b79f145a422' \
'eaa4ff9fb046685a38e368dbd70424d3ec3660f85e02cbbe4099b909f9a7a804' \
'ecc61d3754c7a1c2d7547f029f5b456e3efafcbb73b30d843287905b48ead1d6' \
'e16be2fb5546bc8b46e1cb11c0143172a8f765d92d19c4c7bbbdf4ce191e4ba9' \
)
build() {
cd "${srcdir}"
mkdir install
mkdir install/wolf3d
unzip 1wolf14.zip -d install
cp setup.cfg install/
dosbox -conf dosbox-install.conf
}
package() {
install -d ${pkgdir}/opt/wolfenstein3d
install -m 0644 install/wolf3d/* ${pkgdir}/opt/wolfenstein3d/
install -m 0644 dosbox.conf ${pkgdir}/opt/wolfenstein3d/dosbox.conf
install -m 0755 runme ${pkgdir}/opt/wolfenstein3d/runme
install -D -m 0644 wolfenstein3d.desktop ${pkgdir}/usr/share/applications/wolfenstein3d.desktop
install -D -m 0644 wolfenstein3d.png ${pkgdir}/usr/share/pixmaps/wolfenstein3d.png
install -D -m 0644 LICENSE ${pkgdir}/usr/share/licenses/${pkgname}/LICENSE
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |