sane-git 1.4.0.r3.g02e4000-1
seededverified· maintained by xiota· GPL-2.0-or-later, LicenseRef-GPL-2.0-or-later-with-linking-exception
Scanner Access Now Easy
shelly install aur sane-git --aur-url https://atoll.seafoam-labs.org
This can be permanently set in the shelly
config.json file.
git clone https://atoll.seafoam-labs.org/packages/sane-git.git
Served Git SHAs are synthesized by Atoll when it commits stored revisions - they do not match
upstream AUR.
/v1/packages/sane-git/versions SHAs are authoritative.
Metadata
Relations
Depends
bashcairolibpnglibieee1284net-snmpv4l-utilsavahilibavahi-client.solibavahi-common.socurllibcurl.soglib2libgobject-2.0.solibgphoto2libgphoto2.solibgphoto2_port.solibjpeg-turbolibjpeg.solibtifflibtiff.solibusblibusb-1.0.solibxml2libxml2.sopoppler-gliblibpoppler-glib.sosystemd-libslibsystemd.so
Make dependencies
autoconf-archiveavahicurlgitglib2libgphoto2libjpeg-turbolibtifflibusblibxml2poppler-glibpythonsystemdtexlive-latexextra
Optional dependencies
Conflicts
Provides
Security
Revision scans
| Revision | Status | Scanned | Findings |
|---|---|---|---|
| 7f6466ffa0afhead | verified | 2026-11-05 16:06 | 4 |
Head findings
medium
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
_tag=$(git tag -l '[0-9]*' | grep -Ev '[A-Za-z][A-Za-z]' | sort -rV | head -1)
medium
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
_revision=$(git rev-list --count --cherry-pick "$_tag"...HEAD)
medium
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
_commit=$(git rev-parse --short=7 HEAD)
medium
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
[[ /usr/bin/true ]] && backup=(${backup[@]} $(find "etc/${_pkgname}.d/" -type f | sort))Findings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.