yofrankie

maintainer melindajuhasz · 6 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package downloads a prebuilt game data archive from a non-whitelisted but official Blender project host; the content is non-executable assets and scripts for local execution, posing minimal supply-chain risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt game data archive from a non-whitelisted but official Blender project host; the content is non-executable assets and scripts for local execution, posing minimal supply-chain risk.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:17 "http://download.blender.org/apricot/yofrankie_${pkgver/./_}b_bge.zip")

PKGBUILD

1 offending line(s) highlighted
1# Contributer: Gadget3000 <gadget3000 at msn dot com>
2# Contributer: N30N <archlinux@alunamation.com>
3# Maintainer: debdj <debd92@gmail.com>
4
5pkgname=yofrankie
6pkgver=1.1
7pkgrel=5
8pkgdesc="A 3D platform game based on the bully rodent in Big Buck Bunny"
9url="http://www.yofrankie.org/"
10license=("CCPL")
11arch=('any')
12depends=('libjpeg6-turbo' 'python')
13conflicts=("yofrankie-demo-glsl")
14source=("yofrankie.desktop" \
15 "yofrankie.sh"
16 "yofrankie.png" \
17 "http://download.blender.org/apricot/yofrankie_${pkgver/./_}b_bge.zip")
18md5sums=('d95468f23f1b41bc33ced8cd58c908de'
19 '9ef707dbf7ee92eede64cd29e314261a'
20 '0c80203d56bd4bbbc5f1e74c8e32a54a'
21 '863924c515b483adfa5f63e8d982b5c2')
22
23#build() {
24# cd ${srcdir}/yofrankie_${pkgver/./_}b_bge
25# sed -i 's_python_python2_' Makefile
26# make
27#}
28
29package() {
30 install -D -m644 ${startdir}/yofrankie.desktop ${pkgdir}/usr/share/applications/yofrankie.desktop
31 install -D -m644 ${startdir}/yofrankie.png ${pkgdir}/usr/share/pixmaps/yofrankie.png
32 install -Dm755 ${startdir}/yofrankie.sh ${pkgdir}/usr/bin/yofrankie.sh
33 # or if you want the ugly icon...
34 # install -D -m644 yofrankie_${pkgver/./_}b_bge/dist/yofrankie.png ${pkgdir}/usr/share/pixmaps/yofrankie.png
35
36 data=(
37 "audio"
38 "levels"
39 "levels/level_scripts"
40 "levels/menu_scripts"
41 "levels/selector_scripts"
42 "chars"
43 "chars/frankie_scripts"
44 "chars/sheep_scripts"
45 "chars/textures"
46 "menus"
47 "effects"
48 "effects/effects_scripts"
49 "props"
50 "hud"
51 "hud/hud_scripts"
52 "textures"
53 "textures/credits"
54 "textures/level_lighthouse"
55 "textures/level_nut"
56 "textures/level_nut/raw"
57 )
58
59
60
61 cd ${srcdir}/yofrankie_${pkgver/./_}b_bge
62
63 #install the binaries
64 [[ `uname -m` = 'x86_64' ]] && install -Dm 755 yofrankie-linux-x86_64.bin ${pkgdir}/usr/bin/yofrankie/yofrankie-linux-x86_64.bin
65 [[ `uname -m` = 'i386' ]] && install -Dm 755 yofrankie-linux-i386.bin ${pkgdir}/usr/bin/yofrankie/yofrankie-linux-i386.bin
66
67 #ln -s -T ${pkgdir}/usr/bin/yofrankie/yofrankie-linux-*.bin ${pkgdir}/usr/bin/yofranky
68
69 #data files
70 install -Dm644 yo_frankie_stub.blend ${pkgdir}/usr/share/yofrankie/yo_frankie_stub.blend
71 #ln -s -t ${pkgdir}/usr/bin/yofrankie/ ${pkgdir}/usr/share/yofrankie/yo_frankie_stub.blend
72
73 #if [[ `uname -m` = 'x86_64' ]]; then
74 #install -Dm644 yofrankie-linux-x86_64.bin.bgeconf \
75#${pkgdir}/usr/share/yofrankie/yofrankie-linux-x86_64.bin.bgeconf
76 #ln -s -t ${pkgdir}/usr/bin/yofrankie/ ${pkgdir}/usr/share/yofrankie/yofrankie-linux-x86_64.bin.bgeconf
77 #fi
78
79 for ((i=0; i< ${#data[@]}; i++)); do
80 mkdir -p ${pkgdir}/usr/share/yofrankie/${data[i]}
81 install -m644 -t ${pkgdir}/usr/share/yofrankie/${data[i]} ${data[i]}/*.*
82 mkdir -p ${pkgdir}/usr/bin/yofrankie/${data[i]}
83 for item in ${pkgdir}/usr/share/yofrankie/${data[i]}/*; do
84 ln -s -t ${pkgdir}/usr/bin/yofrankie/${data[i]} ${item}
85 done
86 done
87
88 #make the python scripts executable
89 for i in ${pkgdir}/usr/share/yofrankie/*/*_scripts/*; do
90 chmod 755 ${i}
91 done
92}
93

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion