ruby-xdg 9.5.0-1

seededverified· maintained by cgirard· Apache

Provides a Ruby implementation of the XDG Base Directory Specification

shelly install aur ruby-xdg --aur-url https://atoll.seafoam-labs.org

This can be permanently set in the shelly config.json file.

git clone https://atoll.seafoam-labs.org/packages/ruby-xdg.git

Served Git SHAs are synthesized by Atoll when it commits stored revisions - they do not match upstream AUR. /v1/packages/ruby-xdg/versions SHAs are authoritative.

Metadata

Package base: ruby-xdg
Maintainer: cgirard
Submitter: lucacesari
Votes: 10
Popularity: 0.000000
First submitted: 2017-11-19 15:17
Last modified: 2025-12-19 11:14
Out-of-date: no

Relations

Depends

ruby>=3.4

Make dependencies

ruby-rdoc

Security

Revision scans

Revision	Status	Scanned	Findings
be78e35623d8head	verified	2026-11-05 16:01	2

Head findings

medium command-substitution in PKGBUILD

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

_gemdir="$(ruby -e 'puts Gem.default_dir')"

medium risky-tool in PKGBUILD

'gem' is invoked - this fetches/executes external code outside alpm's control.

gem install --ignore-dependencies --no-user-install -i "$pkgdir/$_gemdir" -n "$pkgdir/usr/bin" $_gemname-$pkgver.gem

Findings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.

← Back to the package catalog