fabricmc-cli-git

LOW

maintainer CelDaemon 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The npm install runs in a subdirectory of the project's own git repository, building declared dependencies for the project, not an undeclared external package.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 90%): The npm install runs in a subdirectory of the project's own git repository, building declared dependencies for the project, not an undeclared external package.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium npm/yarn/pnpm install of an undeclared external package npm_install_external

Runs `npm/yarn/pnpm install <package>` for a package not in source=(), pulling unpinned, unreviewed code at build time. Severity downgraded: the package declares/looks like a Node.js consumer, where build-time installs are expected.

PKGBUILD:27 npm i -w scripts -w cli

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Celeste <celdaemon at voidgroup dot net>
    
      2pkgname=fabricmc-cli-git
    
      3pkgver=r229.95265679
    
      4pkgrel=1
    
      5pkgdesc="Fabric modding CLI utility"
    
      6arch=('any')
    
      7url="https://github.com/FabricMC/fabricmc.net/tree/main/cli"
    
      8license=('MIT')
    
      9depends=('nodejs')
    
      10makedepends=('git' 'npm')
    
      11provides=("fabricmc-cli=$pkgver")
    
      12conflicts=('fabricmc-cli')
    
      13source=(
    
      14    'fabricmc::git+https://github.com/FabricMC/fabricmc.net.git'
    
      15)
    
      16sha256sums=(
    
      17    'SKIP'
    
      18)
    
      19
    
      20pkgver() {
    
      21	cd "$srcdir/fabricmc"
    
      22	printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
    
      23}
    
      24
    
      25prepare() {
    
      26    cd "$srcdir/fabricmc"
    
      27    npm i -w scripts -w cli
    
      28}
    
      29
    
      30build() {
    
      31    cd "$srcdir/fabricmc"
    
      32    npm run -w cli build
    
      33}
    
      34
    
      35package() {
    
      36    cd "$srcdir/fabricmc/cli"
    
      37    install -Dm755 bundled.mjs "$pkgdir/usr/bin/fabric"
    
      38    cd "$srcdir/fabricmc"
    
      39    install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      40}
    
      41

Changes since previous scan

--- PKGBUILD @ 2026-09-08 15:17
+++ PKGBUILD @ 2026-10-17 00:21
@@ -1,22 +1,20 @@
 # Maintainer: Celeste <celdaemon at voidgroup dot net>
 pkgname=fabricmc-cli-git
-pkgver=r222.378fb788
+pkgver=r229.95265679
 pkgrel=1
 pkgdesc="Fabric modding CLI utility"
 arch=('any')
 url="https://github.com/FabricMC/fabricmc.net/tree/main/cli"
 license=('MIT')
-depends=('deno')
+depends=('nodejs')
 makedepends=('git' 'npm')
 provides=("fabricmc-cli=$pkgver")
 conflicts=('fabricmc-cli')
 source=(
     'fabricmc::git+https://github.com/FabricMC/fabricmc.net.git'
-    'no-upgrade.patch'
 )
 sha256sums=(
     'SKIP'
-    '1e1eb6f3176f2c58c9ce3376ea9968f68b0a156098642a6740464a1c055e9aca'
 )
 
 pkgver() {
@@ -26,21 +24,17 @@
 
 prepare() {
     cd "$srcdir/fabricmc"
-    git apply "$srcdir/no-upgrade.patch"
-    cd "$srcdir/fabricmc/scripts"
-    npm i
+    npm i -w scripts -w cli
 }
 
 build() {
-    cd "$srcdir/fabricmc/scripts"
-    npm run buildLib
-    cd "$srcdir/fabricmc/cli"
-    make build
+    cd "$srcdir/fabricmc"
+    npm run -w cli build
 }
 
 package() {
     cd "$srcdir/fabricmc/cli"
-    install -Dm755 bundled.ts "$pkgdir/usr/bin/fabric"
+    install -Dm755 bundled.mjs "$pkgdir/usr/bin/fabric"
     cd "$srcdir/fabricmc"
     install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
 }

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 00:18:51	Low	2
2026-10-11 17:10:51	Medium	1
2026-10-11 15:10:51	Medium	1
2026-09-08 15:17:32	Clean	0
2026-06-18 16:11:54	Clean	0