fabulous-git
LOW
maintainer zxp19821005
0 votes
scanned 2026-11-06 10:12:05.113669
Why flagged
The package builds from a public Git repository with no obfuscated downloads or remote code execution; the only risk is low due to few votes and recent upload, but the source is transparent and dependencies are standard.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a public Git repository with no obfuscated downloads or remote code execution; the only risk is low due to few votes and recent upload, but the source is transparent and dependencies are standard.
PKGBUILD
1
# Maintainer: zxp19821005 <zxp19821005 at 163 dot com>
2
pkgname=fabulous-git
3
_pkgname=Fabulous
4
pkgver=3.12.3.r0.ge563623
5
_electronversion=37
6
_nodeversion=22
7
pkgrel=1
8
pkgdesc="A WYSIWYG notebook with an exciting paper and literature management system."
9
arch=('any')
10
url="https://fb.creatorsn.com"
11
_ghurl="https://github.com/Creator-SN/Fabulous"
12
license=('GPL-3.0-only')
13
conflicts=("${pkgname%-git}")
14
provides=("${pkgname%-git}=${pkgver%.r*}")
15
depends=(
16
"electron${_electronversion}-bin"
17
'nodejs'
18
'python'
19
)
20
makedepends=(
21
'npm'
22
'git'
23
'nvm'
24
'gendesk'
25
'jq'
26
)
27
source=(
28
"${pkgname//-/.}::git+${_ghurl}.git"
29
"${pkgname%-git}.js"
30
"${pkgname%-git}.sh"
31
)
32
sha256sums=('SKIP'
33
'562897be8a17076176f8d985c0d7bc1c685f2e7c9b3a932339ce015963243627'
34
'ace275e253744ca62d2572776df26b947f3c89616239985003126db635fc300e')
35
_get_project_dir() {
36
local d
37
while IFS= read -r d; do
38
find "$d" -name "package.json" ! -path "*/node_modules/*" 2>/dev/null | grep -q . && { echo "$d"; return; }
39
done < <(find "${srcdir}" -maxdepth 1 -mindepth 1 -type d ! -name '.*')
40
}
41
pkgver() {
42
cd "$(_get_project_dir)"
43
set -o pipefail
44
git describe --long --tags --abbrev=7 | sed 's/\([^-]*-g\)/r\1/;s/-/./g;s/v//g' ||
45
printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
46
}
47
_ensure_local_nvm() {
48
local NVM_DIR="${srcdir}/.nvm"
49
source /usr/share/nvm/init-nvm.sh || [[ $? != 1 ]]
50
nvm install "${_nodeversion}"
51
nvm use "${_nodeversion}"
52
}
53
_get_app_dir() {
54
find "${srcdir}" -type f -name "resources.pak" ! -path "*/node_modules/*" -printf '%h\n' 2>/dev/null \
55
| while read -r d; do [[ -d "${d}/resources" ]] && { echo "$d"; return 0; }; done
56
}
57
_get_electron_version() {
58
_elec_ver=$(find "$(_get_project_dir)" -name "package.json" ! -path "*/node_modules/*" -print \
59
| xargs -I{} jq -r '(.devDependencies.electron // .dependencies.electron) // empty' {} 2>/dev/null \
60
| grep -oE '[0-9]+' | head -1)
61
[[ -z "${_elec_ver}" ]] && return 1
62
(( _elec_ver == _electronversion )) && c=32 || c=31
63
echo -e "Electron version: \033[1;${c}m${_elec_ver}$([[ $c -eq 31 ]] && echo " (expected ${_electronversion})")\033[0m"
64
}
65
_set_electron_build_env() {
66
export ELECTRON_DIST="/usr/lib/electron${_electronversion}"
67
export ELECTRON_OVERRIDE_DIST_PATH="${ELECTRON_DIST}"
68
export ELECTRON_SKIP_BINARY_DOWNLOAD=1
69
export ELECTRON_BUILDER_OFFLINE=true
70
export SYSTEM_ELECTRON_VERSION="$(electron${_electronversion} -v | sed 's/^v//')"
71
}
72
_set_npm_build_env() {
73
export HOME="${srcdir}/.home"
74
export XDG_CACHE_HOME="${HOME}/.cache"
75
export XDG_CONFIG_HOME="${HOME}/.config"
76
export XDG_DATA_HOME="${HOME}/.local/share"
77
export npm_config_cache="${HOME}/.npm_cache"
78
export COREPACK_NPM_REGISTRY="${COREPACK_NPM_REGISTRY:-${NPM_CONFIG_REGISTRY:-https://registry.npmjs.org}}"
79
export COREPACK_HOME="${HOME}/.corepack"
80
export npm_config_audit=false
81
export npm_config_registry="${NPM_CONFIG_REGISTRY:-${npm_config_registry:-https://registry.npmjs.org}}"
82
mkdir -p "${HOME}" "${npm_config_cache}" "${COREPACK_HOME}"
83
}
84
prepare() {
85
cd "$(_get_project_dir)"
86
_get_electron_version
87
sed -i -e "
88
s/@electronversion@/${_electronversion}/g
89
s/@appname@/${pkgname%-git}/g
90
" "${srcdir}/${pkgname%-git}.sh" "${srcdir}/${pkgname%-git}.js"
91
gendesk -q -f -n \
92
--pkgname="${pkgname%-git}" \
93
--pkgdesc="${pkgdesc}" \
94
--categories="Utility" \
95
--name="${_pkgname}" \
96
--exec="${pkgname%-git} %U"
97
_ensure_local_nvm
98
_set_electron_build_env
99
_set_npm_build_env
100
jq --arg ver "${SYSTEM_ELECTRON_VERSION}" '.devDependencies.electron = $ver' package.json > package.json.tmp && mv package.json.tmp package.json
101
export NODE_ENV=development
102
npm install
103
}
104
build() {
105
cd "$(_get_project_dir)"
106
_ensure_local_nvm
107
_set_electron_build_env
108
_set_npm_build_env
109
export NODE_ENV=production
110
npm run build
111
npm exec -c "electron-builder --linux dir -c.electronDist=${ELECTRON_DIST}"
112
rm -rf "$(_get_app_dir)/resources/default_app.asar"
113
}
114
package() {
115
install -Dm755 "${srcdir}/${pkgname%-git}.sh" "${pkgdir}/usr/bin/${pkgname%-git}"
116
install -Dm644 "${srcdir}/${pkgname%-git}.js" -t "${pkgdir}/usr/lib/${pkgname%-git}"
117
cp -a "$(_get_app_dir)/resources/." "${pkgdir}/usr/lib/${pkgname%-git}/"
118
install -Dm644 "$(_get_project_dir)/build/icon.png" "${pkgdir}/usr/share/icons/hicolor/64x64/apps/${pkgname%-git}.png"
119
install -Dm644 "$(_get_project_dir)/${pkgname%-git}.desktop" -t "${pkgdir}/usr/share/applications"
120
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-06 10:12:05 | Low | 2 |