1panel-git 2.0.8.r121.g5c59042-6
1Panel, a modern open source linux panel.
config.json file.
/v1/packages/1panel-git/versions SHAs are authoritative.
Metadata
Relations
Depends
Make dependencies
Optional dependencies
Conflicts
Provides
Security
Revision scans
| Revision | Status | Scanned | Findings |
|---|---|---|---|
| b8291907cadehead | verified | 2026-11-05 16:06 | 7 |
Head findings
command-substitution
in
1panel.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
_1panel_agent_version=$(grep -oP '(?<=ORIGINAL_VERSION=).*' /usr/bin/1pctl-agent)
command-substitution
in
1panel.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
_1panel_core_version=$(grep -oP '(?<=ORIGINAL_VERSION=).*' /usr/bin/1pctl-core)
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
risky-tool
in
PKGBUILD'npm' is invoked - this fetches/executes external code outside alpm's control.
npm install
risky-tool
in
PKGBUILD'npm' is invoked - this fetches/executes external code outside alpm's control.
npm rum build:pro
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
GOOS=linux GOARCH=$(go env GOARCH) go build -trimpath -ldflags '-s -w' -o ${srcdir}/${pkgname}/build/1panel-core ${srcdir}/${pkgname}/core/cmd/server/main.gocommand-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
GOOS=linux GOARCH=$(go env GOARCH) go build -trimpath -ldflags '-s -w' -o ${srcdir}/${pkgname}/build/1panel-agent ${srcdir}/${pkgname}/agent/cmd/server/main.goFindings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.