atlassify-git

LOW
maintainer zxp19821005 0 votes scanned 2026-09-29 03:22:52.787385
View on AUR
Why flagged

The package builds from a trusted upstream Git repository and uses standard build tools; the variable-named package installation refers to pnpm, a legitimate dependency manager fetching from the official npm registry, posing minimal risk.

Triggered rules

Low AI review of an ambiguous pattern llm_review

The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it LOW (confidence 95%): The package builds from a trusted upstream Git repository and uses standard build tools; the variable-named package installation refers to pnpm, a legitimate dependency manager fetching from the official npm registry, posing minimal risk.

  • PKGBUILD:94 npm install -g "pnpm@${_pnpmver}" --prefix "${HOME}/.pnpm" \

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: zxp19821005 <zxp19821005 at 163 dot com>
2pkgname=atlassify-git
3_pkgname=Atlassify
4pkgver=3.16.2.r1.g092a31e
5_electronversion=44
6_nodeversion=24
7pkgrel=1
8pkgdesc="Atlassian notifications on your menu bar."
9arch=('any')
10url="https://atlassify.io/"
11_ghurl="https://github.com/setchy/atlassify"
12license=('MIT')
13conflicts=("${pkgname%-git}")
14provides=("${pkgname%-git}=${pkgver%.r*}")
15depends=(
16 "electron${_electronversion}"
17)
18makedepends=(
19 'npm'
20 'curl'
21 'git'
22 'nvm'
23 'gendesk'
24 'pnpm'
25 'icoutils'
26 'jq'
27)
28source=(
29 "${pkgname//-/.}::git+${_ghurl}.git"
30 "${pkgname%-git}.sh"
31)
32sha256sums=('SKIP'
33 'bd5358d8f323d3c2c2f0733364ee4ea55f551dd86ba0be2a76846210b60897fc')
34_get_project_dir() {
35 local d
36 while IFS= read -r d; do
37 find "$d" -name "package.json" ! -path "*/node_modules/*" 2>/dev/null | grep -q . && { echo "$d"; return; }
38 done < <(find "${srcdir}" -maxdepth 1 -mindepth 1 -type d ! -name '.*')
39}
40pkgver() {
41 cd "$(_get_project_dir)"
42 set -o pipefail
43 git describe --long --tags --abbrev=7 | sed 's/\([^-]*-g\)/r\1/;s/-/./g;s/v//g' ||
44 printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
45}
46_get_app_dir() {
47 find "${srcdir}" -type d -name "node_modules" -prune -o -type f -name "resources.pak" -print0 | xargs -0 dirname | head -n 1
48}
49_get_electron_version() {
50 _elec_ver=$(find "$(_get_project_dir)" -name "package.json" ! -path "*/node_modules/*" -print \
51 | xargs -I{} jq -r '(.devDependencies.electron // .dependencies.electron) // empty' {} 2>/dev/null \
52 | grep -v '^$' | sed 's/^[^0-9]*//' | head -1)
53 [[ -z "${_elec_ver}" ]] && return 1
54 echo -e "The electron version is: \033[1;31m${_elec_ver%%.*}\033[0m"
55}
56_ensure_local_nvm() {
57 local NVM_DIR="${srcdir}/.nvm"
58 source /usr/share/nvm/init-nvm.sh || [[ $? != 1 ]]
59 nvm install "${_nodeversion}"
60 nvm use "${_nodeversion}"
61}
62_set_build_env() {
63 export ELECTRON_DIST="/usr/lib/electron${_electronversion}"
64 export ELECTRON_OVERRIDE_DIST_PATH="${ELECTRON_DIST}"
65 export ELECTRON_SKIP_BINARY_DOWNLOAD=1
66 export ELECTRON_BUILDER_OFFLINE=true
67 export SYSTEM_ELECTRON_VERSION="$(electron${_electronversion} -v | sed 's/^v//')"
68 export HOME="${srcdir}/.home"
69 export XDG_CACHE_HOME="${HOME}/.cache"
70 export XDG_CONFIG_HOME="${HOME}/.config"
71 export XDG_DATA_HOME="${HOME}/.local/share"
72 export XDG_STATE_HOME="${HOME}/.local/state"
73 export PNPM_HOME="${HOME}/.pnpm/bin"
74 export pnpm_config_cache_dir="${HOME}/.pnpm_cache"
75 export pnpm_config_store_dir="${HOME}/.pnpm_store"
76 export pnpm_config_global_dir="${HOME}/.pnpm/global"
77 export pnpm_config_state_dir="${HOME}/.pnpm/state"
78 export pnpm_config_node_linker=hoisted
79 export pnpm_config_minimum_release_age=0
80 export pnpm_config_update_notifier=false
81 export COREPACK_NPM_REGISTRY="${COREPACK_NPM_REGISTRY:-${NPM_CONFIG_REGISTRY:-https://registry.npmjs.org}}"
82 export COREPACK_HOME="${HOME}/.corepack"
83 mkdir -p "${HOME}" "${PNPM_HOME}" "${pnpm_config_cache_dir}" "${pnpm_config_store_dir}" "${pnpm_config_global_dir}" "${pnpm_config_state_dir}" "${COREPACK_HOME}"
84 export PATH="${PNPM_HOME}:${PATH}"
85 local _pnpmver=""
86 local _pkgjson="$(_get_project_dir)/package.json"
87 if [ -f "${_pkgjson}" ]; then
88 _pnpmver="$(grep -o '"packageManager"[^,]*' "${_pkgjson}" 2>/dev/null | grep -oE 'pnpm@[^"+]+' | head -n1 | sed 's/^pnpm@//')"
89 if [ -z "${_pnpmver}" ]; then
90 _pnpmver="$(grep -oE '"pnpm"[[:space:]]*:[[:space:]]*"[^"]+"' "${_pkgjson}" 2>/dev/null | grep -oE '[0-9][0-9.]*' | head -n1)"
91 fi
92 fi
93 if [ -n "${_pnpmver}" ]; then
94 npm install -g "pnpm@${_pnpmver}" --prefix "${HOME}/.pnpm" \
95 --registry "${COREPACK_NPM_REGISTRY}"
96 fi
97}
98prepare() {
99 cd "$(_get_project_dir)"
100 _get_electron_version
101 sed -i -e "
102 s/@electronversion@/${_electronversion}/g
103 s/@appname@/${pkgname%-git}/g
104 s/@runname@/app.asar/g
105 s/@cfgdirname@/${_pkgname}/g
106 " "${srcdir}/${pkgname%-git}.sh"
107 gendesk -q -f -n \
108 --pkgname="${pkgname%-git}" \
109 --pkgdesc="${pkgdesc}" \
110 --categories="Development" \
111 --name="${_pkgname}" \
112 --exec="${pkgname%-git} %U"
113 _ensure_local_nvm
114 _set_build_env
115 icotool -i 9 -x assets/images/app-icon.ico -o assets/images/app-icon.png
116 sed -i "s/\"electron\": \"[^\"]*\"/\"electron\": \"${SYSTEM_ELECTRON_VERSION}\"/g" package.json
117 export NODE_ENV=development
118 pnpm install
119}
120build() {
121 cd "$(_get_project_dir)"
122 _ensure_local_nvm
123 _set_build_env
124 export NODE_ENV=production
125 pnpm run build
126 pnpm exec electron-builder --linux dir -c.electronDist="${ELECTRON_DIST}" --config electron-builder.js
127}
128package() {
129 install -Dm755 "${srcdir}/${pkgname%-git}.sh" "${pkgdir}/usr/bin/${pkgname%-git}"
130 install -Dm755 -d "${pkgdir}/usr/lib/${pkgname%-git}"
131 local _app_dir="$(_get_app_dir)"
132 cp -a "${_app_dir}/resources/." "${pkgdir}/usr/lib/${pkgname%-git}/"
133 rm -rf "${pkgdir}/usr/lib/${pkgname%-git}/default_app.asar"
134 local _src="$(_get_project_dir)"
135 install -Dm644 "${_src}/assets/images/app-icon.png" "${pkgdir}/usr/share/icons/hicolor/64x64/apps/${pkgname%-git}.png"
136 install -Dm644 "${_src}/${pkgname%-git}.desktop" -t "${pkgdir}/usr/share/applications"
137 install -Dm644 "${_src}/LICENSE" -t "${pkgdir}/usr/share/licenses/${pkgname}"
138}

Changes since previous scan

--- PKGBUILD @ 2026-09-20 11:33
+++ PKGBUILD @ 2026-09-29 03:22
@@ -1,7 +1,7 @@
# Maintainer: zxp19821005 <zxp19821005 at 163 dot com>
pkgname=atlassify-git
_pkgname=Atlassify
-pkgver=3.16.1.r1.g102a193
+pkgver=3.16.2.r1.g092a31e
_electronversion=44
_nodeversion=24
pkgrel=1
@@ -30,15 +30,28 @@
"${pkgname%-git}.sh"
)
sha256sums=('SKIP'
- 'a774c2f54fbbeeaac3cefc0f7250796d30c86d27f0fd40b7eaf9c0fdb021623d')
+ 'bd5358d8f323d3c2c2f0733364ee4ea55f551dd86ba0be2a76846210b60897fc')
+_get_project_dir() {
+ local d
+ while IFS= read -r d; do
+ find "$d" -name "package.json" ! -path "*/node_modules/*" 2>/dev/null | grep -q . && { echo "$d"; return; }
+ done < <(find "${srcdir}" -maxdepth 1 -mindepth 1 -type d ! -name '.*')
+}
pkgver() {
- cd "${srcdir}/${pkgname%-git}.git"
+ cd "$(_get_project_dir)"
set -o pipefail
git describe --long --tags --abbrev=7 | sed 's/\([^-]*-g\)/r\1/;s/-/./g;s/v//g' ||
printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
}
_get_app_dir() {
find "${srcdir}" -type d -name "node_modules" -prune -o -type f -name "resources.pak" -print0 | xargs -0 dirname | head -n 1
+}
+_get_electron_version() {
+ _elec_ver=$(find "$(_get_project_dir)" -name "package.json" ! -path "*/node_modules/*" -print \
+ | xargs -I{} jq -r '(.devDependencies.electron // .dependencies.electron) // empty' {} 2>/dev/null \
+ | grep -v '^$' | sed 's/^[^0-9]*//' | head -1)
+ [[ -z "${_elec_ver}" ]] && return 1
+ echo -e "The electron version is: \033[1;31m${_elec_ver%%.*}\033[0m"
}
_ensure_local_nvm() {
local NVM_DIR="${srcdir}/.nvm"
@@ -50,33 +63,40 @@
export ELECTRON_DIST="/usr/lib/electron${_electronversion}"
export ELECTRON_OVERRIDE_DIST_PATH="${ELECTRON_DIST}"
export ELECTRON_SKIP_BINARY_DOWNLOAD=1
+ export ELECTRON_BUILDER_OFFLINE=true
export SYSTEM_ELECTRON_VERSION="$(electron${_electronversion} -v | sed 's/^v//')"
- export HOME="${srcdir}/.electron-gyp"
- export XDG_CACHE_HOME="${srcdir}/.cache"
- export XDG_CONFIG_HOME="${srcdir}/.config"
- export XDG_DATA_HOME="${srcdir}/.local/share"
- export XDG_STATE_HOME="${srcdir}/.local/state"
- export PNPM_HOME="${srcdir}/.pnpm/bin"
- export pnpm_config_cache_dir="${srcdir}/.pnpm_cache"
- export pnpm_config_store_dir="${srcdir}/.pnpm_store"
- export pnpm_config_global_dir="${srcdir}/.pnpm/global"
- export pnpm_config_state_dir="${srcdir}/.pnpm/state"
+ export HOME="${srcdir}/.home"
+ export XDG_CACHE_HOME="${HOME}/.cache"
+ export XDG_CONFIG_HOME="${HOME}/.config"
+ export XDG_DATA_HOME="${HOME}/.local/share"
+ export XDG_STATE_HOME="${HOME}/.local/state"
+ export PNPM_HOME="${HOME}/.pnpm/bin"
+ export pnpm_config_cache_dir="${HOME}/.pnpm_cache"
+ export pnpm_config_store_dir="${HOME}/.pnpm_store"
+ export pnpm_config_global_dir="${HOME}/.pnpm/global"
+ export pnpm_config_state_dir="${HOME}/.pnpm/state"
export pnpm_config_node_linker=hoisted
export pnpm_config_minimum_release_age=0
export pnpm_config_update_notifier=false
export COREPACK_NPM_REGISTRY="${COREPACK_NPM_REGISTRY:-${NPM_CONFIG_REGISTRY:-https://registry.npmjs.org}}"
- export COREPACK_HOME="${srcdir}/.corepack"
+ export COREPACK_HOME="${HOME}/.corepack"
mkdir -p "${HOME}" "${PNPM_HOME}" "${pnpm_config_cache_dir}" "${pnpm_config_store_dir}" "${pnpm_config_global_dir}" "${pnpm_config_state_dir}" "${COREPACK_HOME}"
export PATH="${PNPM_HOME}:${PATH}"
-}
-_get_electron_version() {
- _elec_ver=$(find "${srcdir}" -maxdepth 5 -name "package.json" ! -path "*/node_modules/*" \
- -exec grep -l '"electron"' {} + | xargs -I{} jq -r '(.devDependencies.electron // .dependencies.electron) // empty' {} 2>/dev/null | head -1)
- [[ -z "${_elec_ver}" ]] && return 1
- echo -e "The electron version is: \033[1;31m${_elec_ver%%.*}\033[0m"
+ local _pnpmver=""
+ local _pkgjson="$(_get_project_dir)/package.json"
+ if [ -f "${_pkgjson}" ]; then
+ _pnpmver="$(grep -o '"packageManager"[^,]*' "${_pkgjson}" 2>/dev/null | grep -oE 'pnpm@[^"+]+' | head -n1 | sed 's/^pnpm@//')"
+ if [ -z "${_pnpmver}" ]; then
+ _pnpmver="$(grep -oE '"pnpm"[[:space:]]*:[[:space:]]*"[^"]+"' "${_pkgjson}" 2>/dev/null | grep -oE '[0-9][0-9.]*' | head -n1)"
+ fi
+ fi
+ if [ -n "${_pnpmver}" ]; then
+ npm install -g "pnpm@${_pnpmver}" --prefix "${HOME}/.pnpm" \
+ --registry "${COREPACK_NPM_REGISTRY}"
+ fi
}
prepare() {
- cd "${srcdir}/${pkgname//-/.}"
+ cd "$(_get_project_dir)"
_get_electron_version
sed -i -e "
s/@electronversion@/${_electronversion}/g
@@ -98,7 +118,7 @@
pnpm install
}
build() {
- cd "${srcdir}/${pkgname//-/.}"
+ cd "$(_get_project_dir)"
_ensure_local_nvm
_set_build_env
export NODE_ENV=production
@@ -108,10 +128,11 @@
package() {
install -Dm755 "${srcdir}/${pkgname%-git}.sh" "${pkgdir}/usr/bin/${pkgname%-git}"
install -Dm755 -d "${pkgdir}/usr/lib/${pkgname%-git}"
- local _app_dir=$(_get_app_dir)
+ local _app_dir="$(_get_app_dir)"
cp -a "${_app_dir}/resources/." "${pkgdir}/usr/lib/${pkgname%-git}/"
rm -rf "${pkgdir}/usr/lib/${pkgname%-git}/default_app.asar"
- install -Dm644 "${srcdir}/${pkgname//-/.}/assets/images/app-icon.png" "${pkgdir}/usr/share/pixmaps/${pkgname%-git}.png"
- install -Dm644 "${srcdir}/${pkgname//-/.}/${pkgname%-git}.desktop" -t "${pkgdir}/usr/share/applications"
- install -Dm644 "${srcdir}/${pkgname//-/.}/LICENSE" -t "${pkgdir}/usr/share/licenses/${pkgname}"
+ local _src="$(_get_project_dir)"
+ install -Dm644 "${_src}/assets/images/app-icon.png" "${pkgdir}/usr/share/icons/hicolor/64x64/apps/${pkgname%-git}.png"
+ install -Dm644 "${_src}/${pkgname%-git}.desktop" -t "${pkgdir}/usr/share/applications"
+ install -Dm644 "${_src}/LICENSE" -t "${pkgdir}/usr/share/licenses/${pkgname}"
}

Scan history

Scanned at (UTC)SeverityRules
2026-09-29 03:22:52 Low 1
2026-09-20 11:33:17 Clean 0
2026-08-28 01:33:41 Clean 0
2026-07-02 04:44:07 Clean 0
2026-06-26 00:23:49 Clean 0
2026-06-18 16:11:54 Clean 0

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion