python-aiohttp-fast-zlib 0.2.0-1
Use the fastest installed zlib compatible library with aiohttp
config.json file.
/v1/packages/python-aiohttp-fast-zlib/versions SHAs are authoritative.
Metadata
Relations
Depends
Make dependencies
Optional dependencies
Security
Revision scans
| Revision | Status | Scanned | Findings |
|---|---|---|---|
| 4ca8afb8353dhead | verified | 2026-11-05 16:01 | 6 |
Head findings
command-substitution
in
geninfo.shDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
_pkgname=$(awk -F= '/_pkgname=/{print $2}' PKGBUILD)command-substitution
in
geninfo.shDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
pkgver=$(awk -F= '/pkgver=/{print $2}' PKGBUILD)command-substitution
in
geninfo.shDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
pkgdesc=$(yq eval -o=json "$pytoml" | jq -r '.tool.poetry.description')
command-substitution
in
geninfo.shDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
url=$(yq eval -o=json "$pytoml" | jq -r '.tool.poetry.repository')
command-substitution
in
geninfo.shDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
optdepends=$(yq eval -o=json "$pytoml" | jq '.tool.poetry.extras | keys' | jq -r '.[]' | tr 'A-Z' 'a-z' | grep -oP '^[a-z0-9_\-]+' | sed 's|^|python-|' | sed 's|python-python-|python-|' | sed '/^python-python$/d' | sed 's|_|-|' | sort -u | tr '\n' ' ' | sed 's| $||')
command-substitution
in
geninfo.shDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
depends=$(yq eval -o=json "$pytoml" | jq '.tool.poetry.dependencies | keys' | jq -r '.[]' | tr 'A-Z' 'a-z' | grep -oP '^[a-z0-9_\-]+' | sed 's|^|python-|' | sed 's|python-python-|python-|' | sed '/^python-python$/d' | sed 's|_|-|' | grep -vP "^(${optdepends// /|})$" | sort -u | tr '\n' ' ' | sed 's| $||')Findings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.