dbgate-bin 7.3.6-1
Database manager for MySQL, PostgreSQL, SQL Server, MongoDB, SQLite and others.
config.json file.
/v1/packages/dbgate-bin/versions SHAs are authoritative.
Metadata
Relations
Depends
Conflicts
Provides
Security
Revision scans
| Revision | Status | Scanned | Findings |
|---|---|---|---|
| 08adb38c6213head | verified | 2026-11-13 02:29 | 10 |
| 7092a71b9102 | verified | 2026-11-05 16:11 | 9 |
| 90c0d5a05982 | verified | 2026-11-05 16:11 | 7 |
| 3903cad5c3a8 | verified | 2026-11-05 16:10 | 5 |
| 4900a8fecd75 | verified | 2026-11-05 16:07 | 5 |
| d32d7730e5a6 | verified | 2026-11-05 16:02 | 5 |
Head findings
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
local _v=$(strings "$(find "$(_get_app_dir)" -maxdepth 1 -type f \
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
echo -e "Electron version: \033[1;${c}m$_v$([[ $c -eq 31 ]] && echo " (expected $_electronversion)")\033[0m"command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
_size=$(echo "${_icon%/*}" | grep -oE '[0-9]+x[0-9]+|scalable' | head -1)command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
[[ -z "${_size}" ]] && _size=$([[ "${_ext}" == svg ]] && echo scalable || od -An -tu1 -j16 -N8 "${_icon}" 2>/dev/null | awk '{printf "%dx%d",$1*16777216+$2*65536+$3*256+$4,$5*16777216+$6*65536+$7*256+$8}')command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
_dest=$([[ "${_icon}" == */share/pixmaps/* ]] && echo pixmaps || echo "icons/hicolor/${_size}/apps")command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
find "$(_get_app_dir)/resources/app.asar.unpacked" -type f \( -name "*darwin*" -o -name "*win32*" -o -name "*arm64*" \) -exec rm -rf {} +command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
find "$(_get_app_dir)/resources" -type d -exec chmod 755 {} +command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
cp -a "$(_get_app_dir)/resources/." "${pkgdir}/usr/lib/${pkgname%-bin}/"variable-indirection
in
dbgate.shBash indirect variable expansion - the referenced variable is resolved at runtime and cannot be statically resolved.
case "${!_OZONE_VAR:-auto}" invariable-indirection
in
dbgate.shBash indirect variable expansion - the referenced variable is resolved at runtime and cannot be statically resolved.
*) echo "${0##*/}: Unknown Ozone platform '${!_OZONE_VAR}' (available: x11|wayland|auto), falling back to auto" >&2; _OZONE_ARG=() ;;Findings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.