pandoc-static-git 3.10.2.r14.g0ce83fb13-1
Conversion between markup formats (static build, dynamic Lua support)
config.json file.
/v1/packages/pandoc-static-git/versions SHAs are authoritative.
Metadata
Relations
Depends
Make dependencies
Optional dependencies
Conflicts
Provides
Security
Revision scans
| Revision | Status | Scanned | Findings |
|---|---|---|---|
| c3f8c091bfbahead | verified | 2026-11-06 12:35 | 6 |
| 7213bf531e1f | verified | 2026-11-05 16:10 | 6 |
| b062710c7ec4 | verified | 2026-11-05 16:09 | 6 |
| a1b0322aed2c | verified | 2026-11-05 16:05 | 6 |
| f2182e4d3f53 | verified | 2026-11-05 16:02 | 6 |
Head findings
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
revcount=$(NF-1)
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
rts=$(date +@%s --date="$(curl -I http://hackage.haskell.org/01-index.tar |
risky-tool
in
PKGBUILD'curl' is invoked - this fetches/executes external code outside alpm's control.
rts=$(date +@%s --date="$(curl -I http://hackage.haskell.org/01-index.tar |
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
lts=$(TZ=UTC date +@%s --date='today 00:00')
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
ts=$(printf '%s\n' "$rts" "$lts" | sort -n | head -n1)
risky-tool
in
PKGBUILD'cabal install' is invoked - this fetches/executes external code outside alpm's control.
cabal install pandoc-cli --install-method=copy --installdir "$pkgdir/usr/bin"
Findings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.