lunarvim-git 1.4.0.r5.gaa51c20-3
An IDE layer for Neovim with sane defaults
config.json file.
/v1/packages/lunarvim-git/versions SHAs are authoritative.
Metadata
Relations
Depends
Make dependencies
Optional dependencies
Security
Revision scans
| Revision | Status | Scanned | Findings |
|---|---|---|---|
| 20652b022604head | verified | 2026-11-05 16:07 | 6 |
Head findings
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
langs=$(< langs.txt)
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
done | parallel -j $(nproc)
risky-tool
in
PKGBUILD'yarn' is invoked - this fetches/executes external code outside alpm's control.
yarn global add neovim
risky-tool
in
PKGBUILD'yarn' is invoked - this fetches/executes external code outside alpm's control.
yarn global add tree-sitter-cli
risky-tool
in
PKGBUILD'cargo install' is invoked - this fetches/executes external code outside alpm's control.
cargo install fd-find
risky-tool
in
PKGBUILD'cargo install' is invoked - this fetches/executes external code outside alpm's control.
cargo install ripgrep
Findings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.