atom-community-git 1.63.0_dev.r39017.g0f7c5c1-1
A hackable text editor for the 21st century, built on Electron, and based on everything we love about our favorite editors.
config.json file.
/v1/packages/atom-community-git/versions SHAs are authoritative.
Metadata
Relations
Depends
Make dependencies
Conflicts
Security
Revision scans
| Revision | Status | Scanned | Findings |
|---|---|---|---|
| be1ad57d7cechead | verified | 2026-11-05 16:06 | 5 |
Head findings
risky-tool
in
PKGBUILD'node' is invoked - this fetches/executes external code outside alpm's control.
node script/clean.js
risky-tool
in
PKGBUILD'node' is invoked - this fetches/executes external code outside alpm's control.
node script/bootstrap.js
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
printf "%s.r%s.g%s" "$(npm pkg get version | sed 's/-/_/' | sed 's/"//g')" "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
risky-tool
in
PKGBUILD'npm' is invoked - this fetches/executes external code outside alpm's control.
printf "%s.r%s.g%s" "$(npm pkg get version | sed 's/-/_/' | sed 's/"//g')" "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
risky-tool
in
PKGBUILD'node' is invoked - this fetches/executes external code outside alpm's control.
node script/build.js --no-bootstrap
Findings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.