xrcsimulator

LOW

maintainer Octopus118 2 votes scanned 2026-11-01 00:21:48.120785

View on AUR

Why flagged

The package downloads a source zip from the project's own domain (xrcsimulator.org) which is not on standard hosting but plausibly official; the content is a self-contained simulator build with no evidence of remote code execution or obfuscation, and the worst case of a swapped source would be distributing a malicious binary, but the context suggests this is the intended, official distribution method.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a source zip from the project's own domain (xrcsimulator.org) which is not on standard hosting but plausibly official; the content is a self-contained simulator build with no evidence of remote code execution or obfuscation, and the worst case of a swapped source would be distributing a malicious binary, but the context suggests this is the intended, official distribution method.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:20 source=("${pkgname}-${pkgver}.zip::https://xrcsimulator.org/?sdm_process_download=1&download_id=2856")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Ian Lansdowne <idlansdowneatgmailcom>
    
      2# Contributor: Jack Rubacha <rubacha.jack03@gmail.com>
    
      3# Contributor: Edward Wawrzynek <edward@wawrzynek.com>
    
      4
    
      5pkgname=xrcsimulator
    
      6pkgver=21.2b
    
      7pkgdesc="FIRST Tech Challenge, FIRST Robotics Competition, and VEX Simulator"
    
      8pkgrel=1
    
      9arch=('x86_64')
    
      10url="https://xrcsimulator.org"
    
      11license=('unknown')
    
      12depends=(zlib bash)
    
      13optdepends=('openvr: For VR support')
    
      14makedepends=('gendesk')
    
      15replaces=('ftcfrcsimulator')
    
      16
    
      17# Base name of files in the zip
    
      18_files_name="xRC Simulator"
    
      19
    
      20source=("${pkgname}-${pkgver}.zip::https://xrcsimulator.org/?sdm_process_download=1&download_id=2856")
    
      21sha1sums=('f673874603e32559e2a5c0891e603ca5e4d6cd6e')
    
      22
    
      23prepare() {
    
      24	gendesk -n -f --pkgname "$pkgname" --pkgdesc "$pkgdesc" --name="XRC Simulator" --categories="Education;Game"
    
      25}
    
      26
    
      27package() {
    
      28	mkdir -p "$pkgdir/usr/share/xrcsimulator" "$pkgdir/usr/bin"
    
      29
    
      30	# Copy data to /usr/share, set directory permissions to 755, file permissions to 644
    
      31	cp -r . "$pkgdir/usr/share/xrcsimulator/"
    
      32	chmod -R u+rwX,go+rX,go-w "$pkgdir/usr/share/xrcsimulator"
    
      33	chmod 755 "$pkgdir/usr/share/xrcsimulator/$_files_name.x86_64"
    
      34	chmod 755 "$pkgdir/usr/share/xrcsimulator/UnityPlayer.so"
    
      35
    
      36	# Create soft link to binary
    
      37	ln -s "/usr/share/xrcsimulator/$_files_name.x86_64" "$pkgdir/usr/bin/xrcsimulator"
    
      38
    
      39	# Desktop Entry
    
      40	install -Dm644 "$pkgname.desktop" "$pkgdir/usr/share/applications/$pkgname.desktop"
    
      41
    
      42	# Logo
    
      43	install -Dm644 "${_files_name}_Data/Resources/UnityPlayer.png" "$pkgdir/usr/share/pixmaps/$pkgname.png"
    
      44}
    
      45

Changes since previous scan

--- PKGBUILD @ 2026-10-31 00:07
+++ PKGBUILD @ 2026-11-01 00:21
@@ -3,7 +3,7 @@
 # Contributor: Edward Wawrzynek <edward@wawrzynek.com>
 
 pkgname=xrcsimulator
-pkgver=21.1a
+pkgver=21.2b
 pkgdesc="FIRST Tech Challenge, FIRST Robotics Competition, and VEX Simulator"
 pkgrel=1
 arch=('x86_64')
@@ -17,8 +17,8 @@
 # Base name of files in the zip
 _files_name="xRC Simulator"
 
-source=("${pkgname}-${pkgver}.zip::https://xrcsimulator.org/?sdm_process_download=1&download_id=2845")
-sha1sums=('2b2e678a6ac8c7cc44dfc40edf24805260e0e79c')
+source=("${pkgname}-${pkgver}.zip::https://xrcsimulator.org/?sdm_process_download=1&download_id=2856")
+sha1sums=('f673874603e32559e2a5c0891e603ca5e4d6cd6e')
 
 prepare() {
 	gendesk -n -f --pkgname "$pkgname" --pkgdesc "$pkgdesc" --name="XRC Simulator" --categories="Education;Game"

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-01 00:21:48	Low	2
2026-10-31 01:57:41	Medium	1
2026-10-31 00:07:41	Medium	2
2026-10-30 00:29:30	Medium	2
2026-10-29 00:13:55	Medium	2
2026-10-28 00:06:54	Medium	2
2026-10-27 00:23:28	Medium	2
2026-10-26 00:12:40	Medium	2
2026-10-25 00:20:48	Medium	2
2026-10-24 00:14:55	Medium	2
2026-10-23 00:02:19	Medium	2
2026-10-22 00:13:10	Medium	2
2026-10-21 00:12:50	Medium	2
2026-10-20 05:27:35	Medium	2
2026-10-20 00:10:31	Medium	2
2026-10-19 00:03:55	Medium	2
2026-10-18 00:06:55	Medium	2
2026-10-17 00:21:55	Medium	2
2026-10-16 00:12:47	Medium	2
2026-10-15 00:28:05	Medium	2