[Guix packaging] When Zombies Attack! #586

New issue

Open

opened 2026-08-24 17:35:19 +00:00 by htayj · 1 comment

htayj commented

2026-08-24 17:35:19 +00:00

(Migrated from github.com)

Candidate

Project: When Zombies Attack!
Candidate upstream/homepage: http://wwflgames.com/zombies-attack/
Discovery evidence: IRLDb
Reported license: GPL
License status: reported free license; verify exact terms and asset coverage against the pinned upstream source
Catalog note: IRLDb status: alpha.

Scope

Package the independently playable roguelike from source. The canonical repository, latest stable release, source hash, complete dependency closure, and relationship to parent games or sibling forks must be established before implementation. Do not substitute an opaque prebuilt binary.

Research checklist

Identify the canonical maintained source repository and immutable release/commit.
Verify the exact FOSS license for code and every installed font, tile, sound, map, documentation, and bundled dependency.
Check GNU Guix and the channel audit set for an equivalent same-upstream package.
Determine the offline build system and source closure, including submodules or language registries.
Identify updater, telemetry, runtime download, mutable-state, and network behavior that needs Guix integration.

Acceptance checks

guix lint -L . <package> has no package-specific findings.
guix build -L . --no-grafts <package> succeeds without network access or opaque binaries.
Upstream tests run where available, and guix build -L . --no-grafts --check <package> verifies reproducibility.
A fresh HOME/XDG smoke test starts a real local game, exercises meaningful gameplay or save/load behavior, and proves no store writes.
Installed license and third-party notices cover the shipped closure and assets.

Imported from GitHub issue/PR. Originally posted by htayj on 2026-08-24T17:35:19Z.

## Candidate - Project: When Zombies Attack! - Candidate upstream/homepage: http://wwflgames.com/zombies-attack/ - Discovery evidence: [IRLDb](https://forums.roguetemple.com/irldb/index.php?i=47e013c) - Reported license: [[GPL]] - License status: reported free license; verify exact terms and asset coverage against the pinned upstream source - Catalog note: IRLDb status: alpha. ## Scope Package the independently playable roguelike from source. The canonical repository, latest stable release, source hash, complete dependency closure, and relationship to parent games or sibling forks must be established before implementation. Do not substitute an opaque prebuilt binary. ## Research checklist - Identify the canonical maintained source repository and immutable release/commit. - Verify the exact FOSS license for code and every installed font, tile, sound, map, documentation, and bundled dependency. - Check GNU Guix and the channel audit set for an equivalent same-upstream package. - Determine the offline build system and source closure, including submodules or language registries. - Identify updater, telemetry, runtime download, mutable-state, and network behavior that needs Guix integration. ## Acceptance checks - `guix lint -L . <package>` has no package-specific findings. - `guix build -L . --no-grafts <package>` succeeds without network access or opaque binaries. - Upstream tests run where available, and `guix build -L . --no-grafts --check <package>` verifies reproducibility. - A fresh HOME/XDG smoke test starts a real local game, exercises meaningful gameplay or save/load behavior, and proves no store writes. - Installed license and third-party notices cover the shipped closure and assets. --- Imported from [GitHub issue/PR](https://github.com/htayj/guix-channel/issues/586). Originally posted by [htayj](https://github.com/htayj) on 2026-08-24T17:35:19Z.

tay commented

2026-09-20 22:48:37 +00:00

Owner

Goocastle recorded disposition: blocked.

Blocked by a missing immutable source origin. The project has no local channel equivalent: a bounded search of guix/tay/packages found no zombies-attack or When Zombies Attack package. The archived homepage https://web.archive.org/web/20110702061312/http://wwflgames.com/zombies-attack/ identifies version 0.3 beta (2009-06-12) and links the canonical Google Code project at http://code.google.com/p/zombies-attack/; the archived project homepage states the code license is GNU General Public License v2. However, no anonymously retrievable source snapshot at a fixed revision or hash was found. The current wwflgames.com host fails DNS, and the live Google Code archive is JavaScript-only. Anonymous probes of the likely google-code-archive-source buckets returned HTTP 401/403 rather than a source manifest, and likely download object names returned HTTP 403. Software Heritage had no origin record for https://code.google.com/p/zombies-attack/, and a GitHub repository search returned no candidate migrated source repository. The only archived runnable artifact is a JNLP pointing to zombies-attack.jar plus a remote Slick 2D extension, which is an opaque or incomplete runtime distribution and cannot establish source hashes, build-system metadata, dependency licensing, asset/font/sound/map coverage, or a source-built executable runtime contract. Exact blocker: no canonical, immutable, anonymously fetchable origin or published source archive for zombies-attack 0.3 beta. Unblocking requires locating or restoring an exact source snapshot (for example a Google Code archive source bundle, authenticated archive manifest, SVN export with fixed commit and hash, or independently verified mirror) that contains the complete code and shipped assets, with per-origin license and dependency evidence. Only then can the source-build assessment, dependency closure, wrapper behavior, and isolated PNG screenshot contract be established for implementation.

Goocastle recorded disposition: blocked. Blocked by a missing immutable source origin. The project has no local channel equivalent: a bounded search of guix/tay/packages found no zombies-attack or When Zombies Attack package. The archived homepage https://web.archive.org/web/20110702061312/http://wwflgames.com/zombies-attack/ identifies version 0.3 beta (2009-06-12) and links the canonical Google Code project at http://code.google.com/p/zombies-attack/; the archived project homepage states the code license is GNU General Public License v2. However, no anonymously retrievable source snapshot at a fixed revision or hash was found. The current wwflgames.com host fails DNS, and the live Google Code archive is JavaScript-only. Anonymous probes of the likely google-code-archive-source buckets returned HTTP 401/403 rather than a source manifest, and likely download object names returned HTTP 403. Software Heritage had no origin record for https://code.google.com/p/zombies-attack/, and a GitHub repository search returned no candidate migrated source repository. The only archived runnable artifact is a JNLP pointing to zombies-attack.jar plus a remote Slick 2D extension, which is an opaque or incomplete runtime distribution and cannot establish source hashes, build-system metadata, dependency licensing, asset/font/sound/map coverage, or a source-built executable runtime contract. Exact blocker: no canonical, immutable, anonymously fetchable origin or published source archive for zombies-attack 0.3 beta. Unblocking requires locating or restoring an exact source snapshot (for example a Google Code archive source bundle, authenticated archive manifest, SVN export with fixed commit and hash, or independently verified mirror) that contains the complete code and shipped assets, with per-origin license and dependency evidence. Only then can the source-build assessment, dependency closure, wrapper behavior, and isolated PNG screenshot contract be established for implementation.

tay added the

state:blocked

label

2026-09-20 22:48:37 +00:00