mongodb-compass-readonly-git 1:r19796.gf5ee599d1-1
The official GUI for MongoDB - Readonly Edition - git version
config.json file.
/v1/packages/mongodb-compass-readonly-git/versions SHAs are authoritative.
Metadata
Relations
Depends
Make dependencies
Optional dependencies
Conflicts
Provides
Security
Revision scans
| Revision | Status | Scanned | Findings |
|---|---|---|---|
| d0f9426da3e9head | verified | 2026-11-05 16:12 | 6 |
Head findings
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
sed -i "s|%%ELECTRON_VERSION%%|$(cat "/usr/lib/$_electronpkg/version")|g" 'package.json'
risky-tool
in
PKGBUILD'npm' is invoked - this fetches/executes external code outside alpm's control.
npm update electron electron-to-chromium html-webpack-plugin --package-lock-only
risky-tool
in
PKGBUILD'npm' is invoked - this fetches/executes external code outside alpm's control.
HUSKY=0 GYP_DEFINES='libmongocrypt_link_type=dynamic' npm run bootstrap
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
printf 'r%s.g%s' "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
_version="0.0.$(git rev-list --count HEAD)-dev.0"
risky-tool
in
PKGBUILD'npm' is invoked - this fetches/executes external code outside alpm's control.
HADRON_DISTRIBUTION="$_target" HADRON_SKIP_INSTALLER='true' DEV_VERSION_IDENTIFIER="$_version" npm run package-compass
Findings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.