xorg-server-git 21.1.99.1.r1061.ge61bd1e5f-1
seededverified· maintained by JstKddng· custom
Xorg X server (git version)
shelly install aur xorg-server-git --aur-url https://atoll.seafoam-labs.org
This can be permanently set in the shelly
config.json file.
git clone https://atoll.seafoam-labs.org/packages/xorg-server-git.git
Served Git SHAs are synthesized by Atoll when it commits stored revisions - they do not match
upstream AUR.
/v1/packages/xorg-server-git/versions SHAs are authoritative.
Metadata
Relations
Depends
libepoxylibxfont2pixmanxorg-server-common-gitlibunwinddbuslibglxf86-input-libinputnettlelibpciaccesslibdrmlibxshmfencelibxcvt
Make dependencies
xorgproto-gitpixmanlibx11mesamesa-libglxtranslibxkbfilelibxfont2libpciaccesslibxvlibxcvtlibxmulibxrenderlibxilibxawlibxtstlibxresxorg-xkbcompxorg-util-macrosxorg-font-utillibepoxyxcb-utilxcb-util-imagexcb-util-renderutilxcb-util-wmxcb-util-keysymslibxshmfencelibunwindsystemdmesongit
Conflicts
Provides
Security
Revision scans
| Revision | Status | Scanned | Findings |
|---|---|---|---|
| 6b95de855acahead | verified | 2026-11-05 16:07 | 4 |
Head findings
medium
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
local _meson_ver=`grep -m 1 version meson.build | cut -d\' -f 2`
medium
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
local _git_ver=`git describe --long --tags | sed 's/^xorg.server.//;s/\([^-]*-g\)/r\1/;s/-/./g'`
medium
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
local _git_tag=`git describe --tags --abbrev=0 | sed 's/^xorg.server.//'`
medium
command-substitution
in
xorg-server-git.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
if (( $(vercmp $2 1.16.0-3) < 0 )); then
Findings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.