nvme-cli-git r7673.c93350e11-1
NVM-Express user space tooling for Linux
config.json file.
/v1/packages/nvme-cli-git/versions SHAs are authoritative.
Metadata
Relations
Depends
Make dependencies
Optional dependencies
Conflicts
Provides
Security
Revision scans
| Revision | Status | Scanned | Findings |
|---|---|---|---|
| e5f556d9d30chead | verified | 2026-11-05 16:03 | 3 |
Head findings
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
write-outside-build-root
in
nvme-cli-git.installA write targets a path outside the build root from the package's .install scriptlet - scriptlets run as root under alpm's control, and writing system files is their ordinary purpose.
nvme gen-hostnqn > /etc/nvme/hostnqn
write-outside-build-root
in
nvme-cli-git.installA write targets a path outside the build root from the package's .install scriptlet - scriptlets run as root under alpm's control, and writing system files is their ordinary purpose.
uuidgen > /etc/nvme/hostid
Findings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.