nodejs-webpack 5.105.1-1
seededverified· maintained by malthemathiasen· MIT
JavaScript bundler (CommonJs, AMD, ES6 modules, CSS, Images, JSON, CoffeeScript, LESS)
shelly install aur nodejs-webpack --aur-url https://atoll.seafoam-labs.org
This can be permanently set in the shelly
config.json file.
git clone https://atoll.seafoam-labs.org/packages/nodejs-webpack.git
Served Git SHAs are synthesized by Atoll when it commits stored revisions - they do not match
upstream AUR.
/v1/packages/nodejs-webpack/versions SHAs are authoritative.
Metadata
Relations
Depends
Make dependencies
Security
Revision scans
| Revision | Status | Scanned | Findings |
|---|---|---|---|
| 9c0e9e569a2bhead | verified | 2026-11-05 16:12 | 1 |
Head findings
medium
risky-tool
in
PKGBUILD'npm' is invoked - this fetches/executes external code outside alpm's control.
npm install -g --cache "${srcdir}/npm-cache" --prefix "${pkgdir}/usr" "${srcdir}/${pkgname}-${pkgver}.tgz"Findings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.