nodejs-nativefier 52.0.0-1

seededverified· maintained by frealgagu· MIT

A command-line tool to easily create a desktop app for any web site with minimal configuration

shelly install aur nodejs-nativefier --aur-url https://atoll.seafoam-labs.org

This can be permanently set in the shelly config.json file.

git clone https://atoll.seafoam-labs.org/packages/nodejs-nativefier.git

Served Git SHAs are synthesized by Atoll when it commits stored revisions - they do not match upstream AUR. /v1/packages/nodejs-nativefier/versions SHAs are authoritative.

Metadata

Package base: nodejs-nativefier
Maintainer: frealgagu
Submitter: rokoucha
Votes: 79
Popularity: 0.000101
First submitted: 2016-02-20 05:39
Last modified: 2023-09-08 19:23
Out-of-date: no

Relations

Depends

nodejs unzip

Make dependencies

jq npm

Security

Revision scans

Revision	Status	Scanned	Findings
7173647710d4head	verified	2026-11-05 16:13	2

Head findings

medium risky-tool in PKGBUILD

'npm' is invoked - this fetches/executes external code outside alpm's control.

npm install -g --cache "${srcdir}/npm-cache" --prefix "${pkgdir}/usr" "${srcdir}/${pkgname}-${pkgver}.tgz"

medium command-substitution in PKGBUILD

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

local tmppackage="$(mktemp)"

Findings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.

← Back to the package catalog