athens-git v2.0.0.beta.20.r1.g4f1cab12-2
Open-source knowledge graph
config.json file.
/v1/packages/athens-git/versions SHAs are authoritative.
Metadata
Relations
Depends
Make dependencies
Conflicts
Provides
Security
Revision scans
| Revision | Status | Scanned | Findings |
|---|---|---|---|
| 44c12e3c4795head | verified | 2026-11-05 16:02 | 5 |
Head findings
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
yarn upgrade electron@"$(</usr/lib/electron/version)"
risky-tool
in
PKGBUILD'yarn' is invoked - this fetches/executes external code outside alpm's control.
yarn upgrade electron@"$(</usr/lib/electron/version)"
risky-tool
in
PKGBUILD'yarn' is invoked - this fetches/executes external code outside alpm's control.
yarn --cache-folder "${srcdir}/yarn-cache" run \variable-indirection
in
PKGBUILDBash indirect variable expansion - the referenced variable is resolved at runtime and cannot be statically resolved.
electron-builder --linux --"${!CARCH}" --dir \command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
-c.electronVersion="$(</usr/lib/electron/version)"
Findings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.