ruby-libnotify 0.9.4-1

seededverified· maintained by Levitating· MIT

Ruby bindings for libnotify using FFI

shelly install aur ruby-libnotify --aur-url https://atoll.seafoam-labs.org

This can be permanently set in the shelly config.json file.

git clone https://atoll.seafoam-labs.org/packages/ruby-libnotify.git

Served Git SHAs are synthesized by Atoll when it commits stored revisions - they do not match upstream AUR. /v1/packages/ruby-libnotify/versions SHAs are authoritative.

Metadata

Package base: ruby-libnotify
Maintainer: Levitating
Submitter: Levitating
Votes: 0
Popularity: 0.000000
First submitted: 2022-10-04 22:59
Last modified: 2022-10-04 22:59
Out-of-date: no

Relations

Depends

ruby ruby-ffi

Security

Revision scans

Revision	Status	Scanned	Findings
00bab008c8d7head	verified	2026-11-05 16:15	2

Head findings

medium command-substitution in PKGBUILD

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

local _gemdir="$(ruby -e'puts Gem.default_dir')"

medium risky-tool in PKGBUILD

'gem' is invoked - this fetches/executes external code outside alpm's control.

gem install --ignore-dependencies --no-user-install -i "$pkgdir/$_gemdir" -n "$pkgdir/usr/bin" $_gemname-$pkgver.gem

Findings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.

← Back to the package catalog