mongodb-compass-readonly 1.49.4-1
seededverified· maintained by dpeukert· SSPL-1.0
The official GUI for MongoDB - Readonly Edition
shelly install aur mongodb-compass-readonly --aur-url https://atoll.seafoam-labs.org
This can be permanently set in the shelly
config.json file.
git clone https://atoll.seafoam-labs.org/packages/mongodb-compass-readonly.git
Served Git SHAs are synthesized by Atoll when it commits stored revisions - they do not match
upstream AUR.
/v1/packages/mongodb-compass-readonly/versions SHAs are authoritative.
Metadata
Relations
Depends
Make dependencies
Optional dependencies
Security
Revision scans
| Revision | Status | Scanned | Findings |
|---|---|---|---|
| 753b2c14477chead | verified | 2026-11-05 16:07 | 4 |
Head findings
medium
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
pkgver="$(printf '%s' "$_pkgver" | tr '-' '.')"
medium
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
sed -i "s|%%ELECTRON_VERSION%%|$(cat "/usr/lib/$_electronpkg/version")|g" 'package.json'
medium
risky-tool
in
PKGBUILD'npm' is invoked - this fetches/executes external code outside alpm's control.
npm update electron electron-to-chromium html-webpack-plugin --package-lock-only
medium
risky-tool
in
PKGBUILD'npm' is invoked - this fetches/executes external code outside alpm's control.
HUSKY=0 GYP_DEFINES='libmongocrypt_link_type=dynamic' npm run bootstrap
Findings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.