xrcsimulator

LOW

maintainer Octopus118 2 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The package downloads a source zip from a non-whitelisted but project-associated domain (xrcsimulator.org); the archive is used to install a simulator application, and while the host is not standard, it is plausibly the project's official source, with no evidence of remote code execution or malicious payload.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 90%): The package downloads a source zip from a non-whitelisted but project-associated domain (xrcsimulator.org); the archive is used to install a simulator application, and while the host is not standard, it is plausibly the project's official source, with no evidence of remote code execution or malicious payload.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:20 source=("${pkgname}-${pkgver}.zip::https://xrcsimulator.org/?sdm_process_download=1&download_id=2808")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Ian Lansdowne <idlansdowneatgmailcom>
    
      2# Contributor: Jack Rubacha <rubacha.jack03@gmail.com>
    
      3# Contributor: Edward Wawrzynek <edward@wawrzynek.com>
    
      4
    
      5pkgname=xrcsimulator
    
      6pkgver=20.3a
    
      7pkgdesc="FIRST Tech Challenge, FIRST Robotics Competition, and VEX Simulator"
    
      8pkgrel=1
    
      9arch=('x86_64')
    
      10url="https://xrcsimulator.org"
    
      11license=('unknown')
    
      12depends=(zlib bash)
    
      13optdepends=('openvr: For VR support')
    
      14makedepends=('gendesk')
    
      15replaces=('ftcfrcsimulator')
    
      16
    
      17# Base name of files in the zip
    
      18_files_name="xRC Simulator"
    
      19
    
      20source=("${pkgname}-${pkgver}.zip::https://xrcsimulator.org/?sdm_process_download=1&download_id=2808")
    
      21sha1sums=('2ca190c9686171d3289e69976d08511e623cb591')
    
      22
    
      23prepare() {
    
      24	gendesk -n -f --pkgname "$pkgname" --pkgdesc "$pkgdesc" --name="XRC Simulator" --categories="Education;Game"
    
      25}
    
      26
    
      27package() {
    
      28	mkdir -p "$pkgdir/usr/share/xrcsimulator" "$pkgdir/usr/bin"
    
      29
    
      30	# Copy data to /usr/share, set directory permissions to 755, file permissions to 644
    
      31	cp -r . "$pkgdir/usr/share/xrcsimulator/"
    
      32	chmod -R u+rwX,go+rX,go-w "$pkgdir/usr/share/xrcsimulator"
    
      33	chmod 755 "$pkgdir/usr/share/xrcsimulator/$_files_name.x86_64"
    
      34	chmod 755 "$pkgdir/usr/share/xrcsimulator/UnityPlayer.so"
    
      35
    
      36	# Create soft link to binary
    
      37	ln -s "/usr/share/xrcsimulator/$_files_name.x86_64" "$pkgdir/usr/bin/xrcsimulator"
    
      38
    
      39	# Desktop Entry
    
      40	install -Dm644 "$pkgname.desktop" "$pkgdir/usr/share/applications/$pkgname.desktop"
    
      41
    
      42	# Logo
    
      43	install -Dm644 "${_files_name}_Data/Resources/UnityPlayer.png" "$pkgdir/usr/share/pixmaps/$pkgname.png"
    
      44}
    
      45

Changes since previous scan

--- PKGBUILD @ 2026-09-16 00:03
+++ PKGBUILD @ 2026-09-17 00:27
@@ -3,7 +3,7 @@
 # Contributor: Edward Wawrzynek <edward@wawrzynek.com>
 
 pkgname=xrcsimulator
-pkgver=20.2b
+pkgver=20.3a
 pkgdesc="FIRST Tech Challenge, FIRST Robotics Competition, and VEX Simulator"
 pkgrel=1
 arch=('x86_64')
@@ -17,8 +17,8 @@
 # Base name of files in the zip
 _files_name="xRC Simulator"
 
-source=("${pkgname}-${pkgver}.zip::https://xrcsimulator.org/?sdm_process_download=1&download_id=2789")
-sha1sums=('844039d7e110449d222999699b3b513b6ed0a715')
+source=("${pkgname}-${pkgver}.zip::https://xrcsimulator.org/?sdm_process_download=1&download_id=2808")
+sha1sums=('2ca190c9686171d3289e69976d08511e623cb591')
 
 prepare() {
 	gendesk -n -f --pkgname "$pkgname" --pkgdesc "$pkgdesc" --name="XRC Simulator" --categories="Education;Game"

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 03:21:15	Medium	1
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2