ruby-cairo-gobject 4.3.6-1
seededverified· maintained by FabioLolix· LGPL-2.1-only
Ruby/CairoGObject is a Ruby binding of cairo-gobject
shelly install aur ruby-cairo-gobject --aur-url https://atoll.seafoam-labs.org
This can be permanently set in the shelly
config.json file.
git clone https://atoll.seafoam-labs.org/packages/ruby-cairo-gobject.git
Served Git SHAs are synthesized by Atoll when it commits stored revisions - they do not match
upstream AUR.
/v1/packages/ruby-cairo-gobject/versions SHAs are authoritative.
Metadata
Relations
Depends
Security
Revision scans
| Revision | Status | Scanned | Findings |
|---|---|---|---|
| d661386e5d47head | verified | 2026-11-05 16:06 | 4 |
Head findings
medium
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
local _gemdir="$(gem env gemdir)"
medium
risky-tool
in
PKGBUILD'gem' is invoked - this fetches/executes external code outside alpm's control.
local _gemdir="$(gem env gemdir)"
medium
risky-tool
in
PKGBUILD'gem' is invoked - this fetches/executes external code outside alpm's control.
gem build "${_gem}.gemspec"medium
risky-tool
in
PKGBUILD'gem' is invoked - this fetches/executes external code outside alpm's control.
gem install \
Findings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.