linux-zen-git 7.2.8+1470462+g543533fd401e-1
Featureful kernel including various new features, code and optimizations to better suit desktops
config.json file.
/v1/packages/linux-zen-git/versions SHAs are authoritative.
Metadata
Relations
Depends
Make dependencies
Optional dependencies
Conflicts
Provides
Security
Revision scans
| Revision | Status | Scanned | Findings |
|---|---|---|---|
| 3cbf5af9e55chead | verified | 2026-11-05 16:04 | 5 |
| 0d9d06e34261 | verified | 2026-11-05 16:04 | 5 |
Head findings
eval-indirection
in
PKGBUILDDynamic command execution - the command is computed at runtime, but it is built from reviewable literal text or the output of local, well-known tools.
eval $(grep -o "^\(VERSION\|PATCHLEVEL\|SUBLEVEL\) = [0-9a-zA-Z_-]\+" Makefile | tr -d \ )
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
eval $(grep -o "^\(VERSION\|PATCHLEVEL\|SUBLEVEL\) = [0-9a-zA-Z_-]\+" Makefile | tr -d \ )
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
printf "%s.%s.%s+%s+g%s" $VERSION $PATCHLEVEL $SUBLEVEL "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
_kernver="$(make kernelrelease -s)"
command-substitution
in
linux-zen.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
if [ "$(ls -A $dir)" ]; then
Findings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.