1panel 2.1.10-0
seededverifiedout-of-date· maintained by larsbackman· GPL-3.0-or-later
1Panel, a modern open source linux panel.
shelly install aur 1panel --aur-url https://atoll.seafoam-labs.org
This can be permanently set in the shelly
config.json file.
git clone https://atoll.seafoam-labs.org/packages/1panel.git
Served Git SHAs are synthesized by Atoll when it commits stored revisions - they do not match
upstream AUR.
/v1/packages/1panel/versions SHAs are authoritative.
Metadata
Relations
Make dependencies
Optional dependencies
Conflicts
Security
Revision scans
| Revision | Status | Scanned | Findings |
|---|---|---|---|
| 14bc4deb91f7head | verified | 2026-11-05 16:04 | 4 |
Head findings
medium
risky-tool
in
PKGBUILD'npm' is invoked - this fetches/executes external code outside alpm's control.
npm install
medium
risky-tool
in
PKGBUILD'npm' is invoked - this fetches/executes external code outside alpm's control.
npm run build:pro
medium
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
CGO_ENABLED=0 GOOS=linux GOARCH=$(go env GOARCH) go build -trimpath -ldflags '-s -w' -o "${srcdir}/1Panel-${pkgver}/build/1panel-core" "${srcdir}/1Panel-${pkgver}/core/cmd/server/main.go"medium
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
CGO_ENABLED=0 GOOS=linux GOARCH=$(go env GOARCH) go build -trimpath -ldflags '-s -w' -o "${srcdir}/1Panel-${pkgver}/build/1panel-agent" "${srcdir}/1Panel-${pkgver}/agent/cmd/server/main.go"Findings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.