jellyfin-server-git 12.0.0.r29313.911044b-1
seededverified· maintained by Big-B· GPL2
Jellyfin server backend
shelly install aur jellyfin-server-git --aur-url https://atoll.seafoam-labs.org
This can be permanently set in the shelly
config.json file.
git clone https://atoll.seafoam-labs.org/packages/jellyfin-server-git.git
Served Git SHAs are synthesized by Atoll when it commits stored revisions - they do not match
upstream AUR.
/v1/packages/jellyfin-server-git/versions SHAs are authoritative.
Metadata
Relations
Depends
Make dependencies
Conflicts
Provides
Security
Revision scans
| Revision | Status | Scanned | Findings |
|---|---|---|---|
| 952f65fe47dehead | verified | 2026-11-05 16:14 | 5 |
Head findings
medium
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
printf "%s.r%s.%s" "$(grep AssemblyVersion SharedVersion.cs | cut -d'"' -f2)" \
medium
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
"$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
medium
risky-tool
in
PKGBUILD'npm' is invoked - this fetches/executes external code outside alpm's control.
SKIP_PREPARE=1 npm ci --no-audit --no-fund --no-update-notifier --allow-remote all
medium
risky-tool
in
PKGBUILD'dotnet' is invoked - this fetches/executes external code outside alpm's control.
dotnet \
medium
risky-tool
in
PKGBUILD'npm' is invoked - this fetches/executes external code outside alpm's control.
npm run build:production
Findings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.