attract-git 2.7.0.r31-1
A graphical front-end for command line emulators that hides the underlying operating system and is intended to be controlled with a joystick or gamepad.
config.json file.
/v1/packages/attract-git/versions SHAs are authoritative.
Metadata
Relations
Depends
Make dependencies
Conflicts
Provides
Security
Revision scans
| Revision | Status | Scanned | Findings |
|---|---|---|---|
| 3a4900dad52ahead | verified | 2026-11-05 16:07 | 4 |
Head findings
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
tag=$(git describe --abbrev=0)
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
printf "%s.r%s\n" "$(echo ${tag} | sed 's/^v//;s/-/./g')" "$(git rev-list --count ${tag}..HEAD)"command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
export _LIBS=$(pkg-config --libs --silence-errors sfml-graphics sfml-window sfml-system)
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
make EXTRA_CXXFLAGS="$(pkg-config --cflags --silence-errors sfml-graphics sfml-window sfml-system) -Wl,-rpath=$(pkg-config --variable=libdir sfml-all),${_LIBS}" prefix=/usrFindings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.