python-buildbot-react-waterfall-view 4.2.1-2
seededverifiedorphan· GPL-2.0-only
Buildbot Waterfall View plugin (React)
shelly install aur python-buildbot-react-waterfall-view --aur-url https://atoll.seafoam-labs.org
This can be permanently set in the shelly
config.json file.
git clone https://atoll.seafoam-labs.org/packages/python-buildbot-react-waterfall-view.git
Served Git SHAs are synthesized by Atoll when it commits stored revisions - they do not match
upstream AUR.
/v1/packages/python-buildbot-react-waterfall-view/versions SHAs are authoritative.
Metadata
Relations
Depends
Make dependencies
python-buildpython-installerpython-wheelpython-twistedpython-treqpython-jinjapython-msgpackpython-zope-interfacepython-sqlalchemypython-alembicpython-dateutilpython-txaiopython-autobahnpython-pyjwtpython-yamlpython-croniterpython-unidiffpython-packagingpython-graphql-corepython-hvaclibvirt-pythonpython-novaclientpython-pypugjspython-aiohttppython-setuptoolspython-sphinx-jinjapython-sphinx_rtd_themegityarn
Security
Revision scans
| Revision | Status | Scanned | Findings |
|---|---|---|---|
| 6abe5f61d3cfhead | verified | 2026-11-05 16:05 | 4 |
Head findings
medium
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
export PYTHONPATH="$srcdir/tmp_install/usr/lib/python$(get_pyver)/site-packages"
medium
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
make SPHINXOPTS="-j$(nproc)" clean html singlehtml
medium
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
PYTHONPATH="$srcdir/tmp_install/usr/lib/python$(get_pyver)/site-packages"
medium
risky-tool
in
PKGBUILD'yarn' is invoked - this fetches/executes external code outside alpm's control.
yarn run test
Findings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.