wpunix

LOW

maintainer envolution 2 votes scanned 2026-11-01 00:21:48.120785

View on AUR

Why flagged

The package downloads historical, prebuilt binaries (ISO, RPMs) from archive.org and legacy.redhat.com for building WordPerfect 8; these are unverifiable but used as data sources for a legacy application build, not executed directly or used in a malicious context.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads historical, prebuilt binaries (ISO, RPMs) from archive.org and legacy.redhat.com for building WordPerfect 8; these are unverifiable but used as data sources for a legacy application build, not executed directly or used in a malicious context.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:15 "https://archive.org/download/corel-wpunix-8/COREL_WPUNIX_1.iso"
PKGBUILD:16 "https://legacy.redhat.com/pub/redhat/linux/5.2/en/os/i386/RedHat/RPMS/libc-5.3.12-27.i386.rpm"

PKGBUILD

2 offending line(s) highlighted

      1# Maintainer: envolution
    
      2# Contributor: Audun-Marius Gangstø <audun@gangsto.org>
    
      3pkgname=wpunix
    
      4pkgver=3.0
    
      5pkgrel=2
    
      6pkgdesc="WordPerfect 8 for UNIX - Empower Your Application Server"
    
      7arch=("i386" "i686" "x86_64")
    
      8url="https://github.com/taviso/wpunix"
    
      9license=('unknown')
    
      10depends=("lib32-ncurses")
    
      11makedepends=('git' 'cpio' 'gcc' 'binutils' 'xz' 'patchelf' 'rpmextract' 'wget')
    
      12provides=('wp')
    
      13options=('!strip')
    
      14source=("${pkgname}::git+https://github.com/taviso/wpunix.git"
    
      15        "https://archive.org/download/corel-wpunix-8/COREL_WPUNIX_1.iso"
    
      16        "https://legacy.redhat.com/pub/redhat/linux/5.2/en/os/i386/RedHat/RPMS/libc-5.3.12-27.i386.rpm"
    
      17        "https://legacy.redhat.com/pub/redhat/linux/5.2/en/os/i386/RedHat/RPMS/glibc-2.0.7-29.i386.rpm"
    
      18        "arch-rpmextract.patch"
    
      19)
    
      20noextract=(
    
      21    'COREL_WPUNIX_1.iso'
    
      22)
    
      23md5sums=('SKIP'
    
      24         '036d10f279aecc61704b214e7bd58a6d'
    
      25         '914d5d1a67a5a38971a0ff39fbbf6a42'
    
      26         'fc800085ce2c253660886a10efc1aed1'
    
      27         'c06660a90d039890407036de3fd50ece')
    
      28validpgpkeys=()
    
      29
    
      30prepare() {
    
      31
    
      32    cp COREL_WPUNIX_1.iso "$pkgname"/
    
      33
    
      34    cp glibc-2.0.7-29.i386.rpm libc-5.3.12-27.i386.rpm "$pkgname"/
    
      35    git -C "$pkgname" apply -v "$srcdir"/*patch
    
      36}
    
      37
    
      38build() {
    
      39    cd "$pkgname"
    
      40    make clean
    
      41    make intercept/libdisasm.a # Oddly, build fails if this is not built first
    
      42    make wordperfect8_i386
    
      43}
    
      44
    
      45
    
      46package() {
    
      47	cd "$pkgname"
    
      48    install -d -m755 "${pkgdir}/usr/bin"
    
      49    install -d -m755 "${pkgdir}/opt"
    
      50    install -m755 "${srcdir}"/"${pkgname}/wordperfect8_i386/usr/bin/wp" "${pkgdir}/usr/bin/wp"
    
      51    mv "${srcdir}"/"${pkgname}/wordperfect8_i386/opt/wp80" "${pkgdir}/opt/"
    
      52}
    
      53

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-01 00:21:48	Low	2
2026-10-31 00:07:41	Low	2
2026-10-30 00:29:30	Low	2
2026-10-29 00:13:55	Low	2
2026-10-28 00:06:54	Low	2
2026-10-27 00:23:28	Low	2
2026-10-26 00:12:40	Low	2
2026-10-25 00:20:48	Low	2
2026-10-24 00:14:55	Low	2
2026-10-23 00:02:19	Low	2
2026-10-22 00:13:10	Low	2
2026-10-21 00:12:50	Low	2
2026-10-20 00:10:31	Low	2
2026-10-19 00:03:55	Low	2
2026-10-18 00:06:55	Low	2
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2