python-frida 17.23.0-1
Python bindings for Frida
config.json file.
/v1/packages/python-frida/versions SHAs are authoritative.
Metadata
Relations
Depends
Make dependencies
Security
Revision scans
| Revision | Status | Scanned | Findings |
|---|---|---|---|
| cd00e2d13c68head | verified | 2026-11-05 16:09 | 21 |
| 0c8ff7793e52 | verified | 2026-11-05 16:02 | 20 |
| a23351041780 | verified | 2026-11-05 16:02 | 20 |
| 1d4ede26cd5e | verified | 2026-11-05 16:02 | 20 |
| e25bfc9c71a8 | verified | 2026-11-05 16:02 | 17 |
Head findings
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
_nested_builddir="$(_compat32_builddir "${_name}")"command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
_compat_cflags="$(_compat32_flags "${CFLAGS:-}")"command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
_compat_cxxflags="$(_compat32_flags "${CXXFLAGS:-}")"command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
_nested_builddir="$(_compat32_builddir "${_name}")"command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
_nested_builddir="$(_compat32_builddir "${_name}")"command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
_compat_cflags="$(_compat32_flags "${CFLAGS:-}")"command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
_compat_cxxflags="$(_compat32_flags "${CXXFLAGS:-}")"risky-tool
in
PKGBUILD'npm' is invoked - this fetches/executes external code outside alpm's control.
npm ci --ignore-scripts
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
_deps_v8_commit="$(sed -n '/^\[v8\]$/,/^\[/ s/^version = "\(.*\)"$/\1/p' "${_deps_toml}")"command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
if [[ "$(<"${_frida_v8_commit_file}")" != "${_sdk_v8_commit}" ]]; thencommand-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
[[ "$(<"${_sdk_prefix}/VERSION.txt")" == "${_sdk_version}" ]] || {command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
_jobs="$(_makepkg_jobs)"
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
_wheel="$(find "${srcdir}/python-frida-dist" -maxdepth 1 -type f -name '*.whl' -print -quit)"command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
_tmp="$(mktemp "${_pc}.XXXXXX")" || return 1command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
_python_dir="$(find "${pkgdir}/usr/lib" -mindepth 1 -maxdepth 1 -type d -name 'python*' -print -quit)"command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
_gum_symbols="$(mktemp)" || return 1
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
_gum_symbols_raw="$(mktemp)" || {command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
_gumjs_symbols="$(mktemp)" || return 1
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
_gumjs_symbols_raw="$(mktemp)" || {command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
_wheel="$(find "${srcdir}/python-frida-dist" -maxdepth 1 -type f -name 'frida-*.whl' -print -quit)"command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
_extension="$(find "${pkgdir}/usr/lib" -type f -path '*/site-packages/frida/_frida.abi3.so' -print -quit)"Findings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.