yofrankie
The package downloads a prebuilt game data archive from a non-whitelisted but official Blender project host; the content is non-executable assets and scripts for local execution, posing minimal supply-chain risk.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt game data archive from a non-whitelisted but official Blender project host; the content is non-executable assets and scripts for local execution, posing minimal supply-chain risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:17
"http://download.blender.org/apricot/yofrankie_${pkgver/./_}b_bge.zip")
PKGBUILD
1 offending line(s) highlighted# Contributer: Gadget3000 <gadget3000 at msn dot com>
# Contributer: N30N <archlinux@alunamation.com>
# Maintainer: debdj <debd92@gmail.com>
pkgname=yofrankie
pkgver=1.1
pkgrel=5
pkgdesc="A 3D platform game based on the bully rodent in Big Buck Bunny"
url="http://www.yofrankie.org/"
license=("CCPL")
arch=('any')
depends=('libjpeg6-turbo' 'python')
conflicts=("yofrankie-demo-glsl")
source=("yofrankie.desktop" \
"yofrankie.sh"
"yofrankie.png" \
"http://download.blender.org/apricot/yofrankie_${pkgver/./_}b_bge.zip")
md5sums=('d95468f23f1b41bc33ced8cd58c908de'
'9ef707dbf7ee92eede64cd29e314261a'
'0c80203d56bd4bbbc5f1e74c8e32a54a'
'863924c515b483adfa5f63e8d982b5c2')
#build() {
# cd ${srcdir}/yofrankie_${pkgver/./_}b_bge
# sed -i 's_python_python2_' Makefile
# make
#}
package() {
install -D -m644 ${startdir}/yofrankie.desktop ${pkgdir}/usr/share/applications/yofrankie.desktop
install -D -m644 ${startdir}/yofrankie.png ${pkgdir}/usr/share/pixmaps/yofrankie.png
install -Dm755 ${startdir}/yofrankie.sh ${pkgdir}/usr/bin/yofrankie.sh
# or if you want the ugly icon...
# install -D -m644 yofrankie_${pkgver/./_}b_bge/dist/yofrankie.png ${pkgdir}/usr/share/pixmaps/yofrankie.png
data=(
"audio"
"levels"
"levels/level_scripts"
"levels/menu_scripts"
"levels/selector_scripts"
"chars"
"chars/frankie_scripts"
"chars/sheep_scripts"
"chars/textures"
"menus"
"effects"
"effects/effects_scripts"
"props"
"hud"
"hud/hud_scripts"
"textures"
"textures/credits"
"textures/level_lighthouse"
"textures/level_nut"
"textures/level_nut/raw"
)
cd ${srcdir}/yofrankie_${pkgver/./_}b_bge
#install the binaries
[[ `uname -m` = 'x86_64' ]] && install -Dm 755 yofrankie-linux-x86_64.bin ${pkgdir}/usr/bin/yofrankie/yofrankie-linux-x86_64.bin
[[ `uname -m` = 'i386' ]] && install -Dm 755 yofrankie-linux-i386.bin ${pkgdir}/usr/bin/yofrankie/yofrankie-linux-i386.bin
#ln -s -T ${pkgdir}/usr/bin/yofrankie/yofrankie-linux-*.bin ${pkgdir}/usr/bin/yofranky
#data files
install -Dm644 yo_frankie_stub.blend ${pkgdir}/usr/share/yofrankie/yo_frankie_stub.blend
#ln -s -t ${pkgdir}/usr/bin/yofrankie/ ${pkgdir}/usr/share/yofrankie/yo_frankie_stub.blend
#if [[ `uname -m` = 'x86_64' ]]; then
#install -Dm644 yofrankie-linux-x86_64.bin.bgeconf \
#${pkgdir}/usr/share/yofrankie/yofrankie-linux-x86_64.bin.bgeconf
#ln -s -t ${pkgdir}/usr/bin/yofrankie/ ${pkgdir}/usr/share/yofrankie/yofrankie-linux-x86_64.bin.bgeconf
#fi
for ((i=0; i< ${#data[@]}; i++)); do
mkdir -p ${pkgdir}/usr/share/yofrankie/${data[i]}
install -m644 -t ${pkgdir}/usr/share/yofrankie/${data[i]} ${data[i]}/*.*
mkdir -p ${pkgdir}/usr/bin/yofrankie/${data[i]}
for item in ${pkgdir}/usr/share/yofrankie/${data[i]}/*; do
ln -s -t ${pkgdir}/usr/bin/yofrankie/${data[i]} ${item}
done
done
#make the python scripts executable
for i in ${pkgdir}/usr/share/yofrankie/*/*_scripts/*; do
chmod 755 ${i}
done
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |