solana-dev 1:4.4.0-1
Solana program developer tools
config.json file.
/v1/packages/solana-dev/versions SHAs are authoritative.
Metadata
Relations
Depends
Make dependencies
Conflicts
Security
Revision scans
| Revision | Status | Scanned | Findings |
|---|---|---|---|
| bee3f4f524b1head | verified | 2026-11-05 16:09 | 5 |
| f2e49caf8d30 | verified | 2026-11-05 16:02 | 5 |
| 1abfb8de6069 | verified | 2026-11-05 16:02 | 5 |
| 51334eec8c4a | verified | 2026-11-05 16:02 | 5 |
| f22c2514c1d8 | verified | 2026-11-05 16:01 | 5 |
Head findings
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
cargo fetch --locked --target "$(rustc -vV | sed -n 's/host: //p')"
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
cargo fetch --locked --target "$(rustc -vV | sed -n 's/host: //p')"
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
cargo fetch --locked --target "$(rustc -vV | sed -n 's/host: //p')"
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
cargo fetch --locked --target "$(rustc -vV | sed -n 's/host: //p')"
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
export LD_LIBRARY_PATH="$(rustc --print sysroot)/lib${LD_LIBRARY_PATH:+:$LD_LIBRARY_PATH}"Findings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.