cloudflare-cf

LOW

maintainer bhyoo 0 votes scanned 2026-10-07 16:05:57.670383

View on AUR

Why flagged

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: Byeonghoon Yoo <bhyoo@bhyoo.com>
    
      2pkgname=cloudflare-cf
    
      3_npmname=cf
    
      4pkgver=1.0.0_beta.13
    
      5_npmver=${pkgver/_/-}
    
      6pkgrel=1
    
      7pkgdesc="Agentic command-line interface for the entire Cloudflare API"
    
      8arch=('x86_64' 'aarch64')
    
      9url="https://github.com/cloudflare/cf"
    
      10license=('MIT OR Apache-2.0')
    
      11# workerd (via miniflare) and sharp ship prebuilt ELF files linked against
    
      12# glibc, libgcc_s and libstdc++.
    
      13depends=('nodejs>=22' 'glibc' 'libgcc' 'libstdc++')
    
      14makedepends=('npm')
    
      15optdepends=('cloudflared: use the system binary for tunnels instead of a downloaded copy'
    
      16            'xdg-utils: open the browser for OAuth login')
    
      17# Both Cloud Foundry CLI packages install /usr/bin/cf.
    
      18conflicts=('cloudfoundry-cli' 'cloudfoundry6-cli')
    
      19source=("$_npmname-$_npmver.tgz::https://registry.npmjs.org/$_npmname/-/$_npmname-$_npmver.tgz")
    
      20noextract=("$_npmname-$_npmver.tgz")
    
      21sha256sums=('b735e5f4086e092dd6a7ea08e2e571b31219623b138912ef3a76c64f0d6e62cc')
    
      22# Keep the bundled prebuilt workerd and sharp binaries untouched.
    
      23options=('!strip' '!debug')
    
      24
    
      25package() {
    
      26    # Isolated cache keeps the build user's ~/.npm untouched.
    
      27    npm install -g \
    
      28        --prefix "$pkgdir/usr" \
    
      29        --cache "$srcdir/npm-cache" \
    
      30        --no-audit --no-fund --loglevel=warn \
    
      31        "$srcdir/$_npmname-$_npmver.tgz"
    
      32
    
      33    # Non-deterministic race in npm gives 777 permissions to random directories.
    
      34    # See https://github.com/npm/npm/issues/9359 for details.
    
      35    find "$pkgdir/usr" -type d -exec chmod 755 {} +
    
      36
    
      37    # npm gives ownership of ALL FILES to the build user.
    
      38    # See https://bugs.archlinux.org/task/63396 for details.
    
      39    chown -R root:root "$pkgdir"
    
      40
    
      41    rm -rf "$pkgdir/usr/etc"
    
      42
    
      43    local _moddir="$pkgdir/usr/lib/node_modules/$_npmname"
    
      44    install -Dm644 "$_moddir/LICENSE-MIT" "$_moddir/LICENSE-APACHE" \
    
      45        -t "$pkgdir/usr/share/licenses/$pkgname/"
    
      46}
    
      47

Changes since previous scan

--- PKGBUILD @ 2026-10-06 00:13
+++ PKGBUILD @ 2026-10-07 16:05
@@ -1,7 +1,7 @@
 # Maintainer: Byeonghoon Yoo <bhyoo@bhyoo.com>
 pkgname=cloudflare-cf
 _npmname=cf
-pkgver=1.0.0_beta.12
+pkgver=1.0.0_beta.13
 _npmver=${pkgver/_/-}
 pkgrel=1
 pkgdesc="Agentic command-line interface for the entire Cloudflare API"
@@ -18,7 +18,7 @@
 conflicts=('cloudfoundry-cli' 'cloudfoundry6-cli')
 source=("$_npmname-$_npmver.tgz::https://registry.npmjs.org/$_npmname/-/$_npmname-$_npmver.tgz")
 noextract=("$_npmname-$_npmver.tgz")
-sha256sums=('2c668df92ba9b73c50ab5b8495bc00ef51f3064dde9ff70b3d9c02c8e4cb3076')
+sha256sums=('b735e5f4086e092dd6a7ea08e2e571b31219623b138912ef3a76c64f0d6e62cc')
 # Keep the bundled prebuilt workerd and sharp binaries untouched.
 options=('!strip' '!debug')
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-07 16:05:57	Low	1
2026-10-06 00:13:36	Clean	2
2026-10-05 23:40:58	Low	1