waf-git r3170.177bd3b0-2
seededverified· maintained by vaurelios· GPL3
General-purpose build system modelled after Scons
shelly install aur waf-git --aur-url https://atoll.seafoam-labs.org
This can be permanently set in the shelly
config.json file.
git clone https://atoll.seafoam-labs.org/packages/waf-git.git
Served Git SHAs are synthesized by Atoll when it commits stored revisions - they do not match
upstream AUR.
/v1/packages/waf-git/versions SHAs are authoritative.
Metadata
Relations
Depends
Make dependencies
Conflicts
Provides
Security
Revision scans
| Revision | Status | Scanned | Findings |
|---|---|---|---|
| dc8abeee9daahead | verified | 2026-11-05 16:06 | 3 |
Head findings
medium
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
medium
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
local wafversion=$(./waf-light --version | perl -p -e 's/waf ([0-9.]+) .*/$1/g')
medium
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
local wafrevision=$(grep -aPom1 '(?<=^REVISION=")[[:xdigit:]]*(?="$)' "$pkgdir/usr/bin/waf")
Findings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.