18xx-maker-git 1.0.0.beta.138.r0.gbba4dac-1

seededverified· maintained by zxp19821005· MIT

🚂 Prototyping tool for 18xx games 💸.

shelly install aur 18xx-maker-git --aur-url https://atoll.seafoam-labs.org
This can be permanently set in the shelly config.json file.

Metadata

Package base
18xx-maker-git
Maintainer
zxp19821005
Submitter
zxp19821005
Votes
0
Popularity
0.000000
First submitted
2025-01-13 05:58
Last modified
2026-10-19 03:29
Out-of-date
no

Relations

Depends

Make dependencies

Conflicts

Provides

Security

Verified - no high/critical red flags - content is served.
revision 9ff8fc5260da scanned 2026-11-05 16:03 UTC findings 22 medium

Revision scans

Revision Status Scanned Findings
9ff8fc5260dahead verified 2026-11-05 16:03 22
23c773de4396 verified 2026-11-05 16:10 17
5ecdd35def44 verified 2026-11-05 16:02 11

Head findings

medium command-substitution in PKGBUILD

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

cd "$(_get_project_dir)"
medium command-substitution in PKGBUILD

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
medium risky-tool in PKGBUILD

'nvm' is invoked - this fetches/executes external code outside alpm's control.

nvm install "${_nodeversion}"
medium risky-tool in PKGBUILD

'nvm' is invoked - this fetches/executes external code outside alpm's control.

nvm use "${_nodeversion}"
medium command-substitution in PKGBUILD

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

_elec_ver=$(find "$(_get_project_dir)" -name "package.json" ! -path "*/node_modules/*" -print \
medium command-substitution in PKGBUILD

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

echo -e "Electron version: \033[1;${c}m${_elec_ver}$([[ $c -eq 31 ]] && echo " (expected ${_electronversion})")\033[0m"
medium command-substitution in PKGBUILD

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

export SYSTEM_ELECTRON_VERSION="$(electron${_electronversion} -v | sed 's/^v//')"
medium command-substitution in PKGBUILD

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

local _pkgjson="$(_get_project_dir)/package.json"
medium command-substitution in PKGBUILD

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

_pnpmver="$(grep -o '"packageManager"[^,]*' "${_pkgjson}" 2>/dev/null | grep -oE 'pnpm@[^"+]+' | head -n1 | sed 's/^pnpm@//')"
medium command-substitution in PKGBUILD

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

_pnpmver="$(grep -oE '"pnpm"[[:space:]]*:[[:space:]]*"[^"]+"' "${_pkgjson}" 2>/dev/null | grep -oE '[0-9][0-9.]*' | head -n1)"
medium risky-tool in PKGBUILD

'npm' is invoked - this fetches/executes external code outside alpm's control.

npm install -g "pnpm@${_pnpmver}" --prefix "${HOME}/.pnpm" \
medium command-substitution in PKGBUILD

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

cd "$(_get_project_dir)"
medium risky-tool in PKGBUILD

'pnpm' is invoked - this fetches/executes external code outside alpm's control.

pnpm install
medium command-substitution in PKGBUILD

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

cd "$(_get_project_dir)"
medium risky-tool in PKGBUILD

'pnpm' is invoked - this fetches/executes external code outside alpm's control.

pnpm run build:app
medium risky-tool in PKGBUILD

'pnpm' is invoked - this fetches/executes external code outside alpm's control.

pnpm -c exec "electron-builder --linux dir -c.electronDist=${ELECTRON_DIST}"
medium command-substitution in PKGBUILD

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

rm -rf "$(_get_app_dir)/resources/default_app.asar"
medium command-substitution in PKGBUILD

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

cp -a "$(_get_app_dir)/resources/." "${pkgdir}/usr/lib/${pkgname%-git}/"
medium command-substitution in PKGBUILD

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

install -Dm644 "$(_get_project_dir)/dist/app/linux-"*/resources/app.asar -t "${pkgdir}/usr/lib/${pkgname%-git}"
medium command-substitution in PKGBUILD

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

install -Dm644 "$(_get_project_dir)/${pkgname%-git}.desktop" -t "${pkgdir}/usr/share/applications"
medium command-substitution in PKGBUILD

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

install -Dm644 "$(_get_project_dir)/electron/assets/${pkgname%-git}.png" -t "${pkgdir}/usr/share/pixmaps"
medium command-substitution in PKGBUILD

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

install -Dm644 "$(_get_project_dir)/LICENSE" -t "${pkgdir}/usr/share/licenses/${pkgname}"

Findings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.

← Back to the package catalog

Connection lost

Rejoining the server...

Rejoin failed... trying again in seconds.

Failed to rejoin. Please retry or reload the page.

The session has been paused by the server.

Failed to resume the session. Please retry or reload the page.