1password 8.12.44-33
seededverified· maintained by 1Password· LicenseRef-1Password-Proprietary
Password manager and secure wallet
shelly install aur 1password --aur-url https://atoll.seafoam-labs.org
This can be permanently set in the shelly
config.json file.
git clone https://atoll.seafoam-labs.org/packages/1password.git
Served Git SHAs are synthesized by Atoll when it commits stored revisions - they do not match
upstream AUR.
/v1/packages/1password/versions SHAs are authoritative.
Metadata
Relations
Depends
Conflicts
Security
Revision scans
| Revision | Status | Scanned | Findings |
|---|---|---|---|
| 8e79b28c9999head | verified | 2026-11-05 16:11 | 3 |
| f55f94886727 | verified | 2026-11-05 16:11 | 3 |
| 8f7e44557ec4 | verified | 2026-11-05 16:11 | 3 |
| c530a652568f | verified | 2026-11-05 16:06 | 3 |
| d95e1f05447f | verified | 2026-11-05 16:04 | 3 |
Head findings
medium
command-substitution
in
1password.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
if [ $(getent group "${GROUP_NAME}") ]; thenmedium
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
POLICY_OWNERS="$(cut -d: -f1,3 /etc/passwd | grep -E ':[0-9]{4}$' | cut -d: -f1 | head -n 10 | sed 's/^/unix-user:/' | tr '\n' ' ')"medium
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
$(cat ./com.1password.1Password.policy.tpl)
Findings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.