zxadvance

maintainer Sterophonick · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The PKGBUILD downloads a ZIP from zophar.net, a well-known and long-standing emulation/ROM archive site. The ZIP contains a Windows GBA emulator executable (ZXAdvance 1.0.1.exe) that is installed to /usr/share/zxadvance and run via Wine — it is not executed natively on the host system. The MD5 checksum for the ZIP is present (2114f492d4b55d8e13ddde1c777ad905), providing integrity verification. The wrapper script and .desktop file are local sources with SKIP checksums, which is normal for maintainer-provided scripts. While zophar.net is not the original developer's host, it is a reputable archival site for emulators and the file is checksummed. The Wine-wrapped Windows binary does run code, but this is the standard pattern for wine-wrapped AUR packages. The three SKIP checksums for local files are slightly sloppy but not a security concern. Overall this is a low-risk, somewhat non-standard but not dangerous packaging pattern.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (anthropic/claude-4.6-sonnet-20260217) reviewed the full PKGBUILD and judged it LOW (confidence 80%): The PKGBUILD downloads a ZIP from zophar.net, a well-known and long-standing emulation/ROM archive site. The ZIP contains a Windows GBA emulator executable (ZXAdvance 1.0.1.exe) that is installed to /usr/share/zxadvance and run via Wine — it is not executed natively on the host system. The MD5 checksum for the ZIP is present (2114f492d4b55d8e13ddde1c777ad905), providing integrity verification. The wrapper script and .desktop file are local sources with SKIP checksums, which is normal for maintainer-provided scripts. While zophar.net is not the original developer's host, it is a reputable archival site for emulators and the file is checksummed. The Wine-wrapped Windows binary does run code, but this is the standard pattern for wine-wrapped AUR packages. The three SKIP checksums for local files are slightly sloppy but not a security concern. Overall this is a low-risk, somewhat non-standard but not dangerous packaging pattern.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:9 source=(https://www.zophar.net/fileuploads/1/267umkwg/ZXAdvance101.zip

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Sterophonick
    
      2pkgname=zxadvance
    
      3_pkgname='zxadvance'
    
      4pkgver=1.0.1
    
      5pkgrel=1
    
      6pkgdesc='ARM Powered ZX Spectrum emulator for the GBA (tm)'
    
      7arch=(x86_64 i686)
    
      8depends=('wine' 'winetricks')
    
      9source=(https://www.zophar.net/fileuploads/1/267umkwg/ZXAdvance101.zip
    
      10        zxadvance
    
      11        zxadvance.desktop
    
      12        zxadvance.png)
    
      13md5sums=('2114f492d4b55d8e13ddde1c777ad905'
    
      14         'SKIP'
    
      15         'SKIP'
    
      16         'SKIP')
    
      17options=(!debug !strip)
    
      18
    
      19package() {
    
      20  install -Dm755 zxadvance $pkgdir/usr/bin/zxadvance
    
      21  install -Dm644 zxadvance.desktop $pkgdir/usr/share/applications/zxadvance.desktop
    
      22  install -Dm644 zxadvance.png $pkgdir/usr/share/pixmaps/zxadvance.png
    
      23
    
      24  mkdir -p $pkgdir/usr/share/zxadvance
    
      25
    
      26  cp -r $srcdir/ZXA.INI $pkgdir/usr/share/zxadvance
    
      27  cp -r $srcdir/ZXAdvance\ 1.0.1.exe $pkgdir/usr/share/zxadvance
    
      28  cp -r $srcdir/readme.txt $pkgdir/usr/share/zxadvance
    
      29
    
      30  chmod -R 777 $pkgdir/usr/share/zxadvance
    
      31}
    
      32

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2