fragmemo-git
LOW
maintainer zxp19821005
0 votes
scanned 2026-10-26 11:44:54.928123
Why flagged
The package builds from the project's own git repository and uses standard npm/electron build processes; the flagged low votes and recent upload are metadata concerns, not security risks.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package builds from the project's own git repository and uses standard npm/electron build processes; the flagged low votes and recent upload are metadata concerns, not security risks.
PKGBUILD
1
# Maintainer: zxp19821005 <zxp19821005 at 163 dot com>
2
pkgname=fragmemo-git
3
pkgver=2.1.0.r2.g055da33
4
_electronversion=44
5
_nodeversion=24
6
pkgrel=1
7
pkgdesc="Code snippets manager for developers"
8
arch=('any')
9
url="https://github.com/noriyotcp/fragmemo"
10
license=('MIT')
11
conflicts=("${pkgname%-git}")
12
provides=("${pkgname%-git}=${pkgver%.r*}")
13
depends=(
14
"electron${_electronversion}"
15
)
16
makedepends=(
17
'npm'
18
'git'
19
'nvm'
20
'gendesk'
21
'jq'
22
)
23
source=(
24
"${pkgname//-/.}::git+${url}.git"
25
"${pkgname%-git}.js"
26
"${pkgname%-git}.sh"
27
)
28
sha256sums=('SKIP'
29
'562897be8a17076176f8d985c0d7bc1c685f2e7c9b3a932339ce015963243627'
30
'9417ba033cfc980d6723978dc5fca100cbec6da78e5494f9e64960e4efec8c21')
31
_get_project_dir() {
32
local d
33
while IFS= read -r d; do
34
find "$d" -name "package.json" ! -path "*/node_modules/*" 2>/dev/null | grep -q . && { echo "$d"; return; }
35
done < <(find "${srcdir}" -maxdepth 1 -mindepth 1 -type d ! -name '.*')
36
}
37
pkgver() {
38
cd "$(_get_project_dir)"
39
set -o pipefail
40
git describe --long --tags --abbrev=7 | sed 's/\([^-]*-g\)/r\1/;s/-/./g;s/v//g' ||
41
printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
42
}
43
_ensure_local_nvm() {
44
local NVM_DIR="${srcdir}/.nvm"
45
source /usr/share/nvm/init-nvm.sh || [[ $? != 1 ]]
46
nvm install "${_nodeversion}"
47
nvm use "${_nodeversion}"
48
}
49
_get_app_dir() {
50
find "${srcdir}" -type f -name "resources.pak" ! -path "*/node_modules/*" -printf '%h\n' 2>/dev/null \
51
| while read -r d; do [[ -d "${d}/resources" ]] && { echo "$d"; return 0; }; done
52
}
53
_get_electron_version() {
54
_elec_ver=$(find "$(_get_project_dir)" -name "package.json" ! -path "*/node_modules/*" -print \
55
| xargs -I{} jq -r '(.devDependencies.electron // .dependencies.electron) // empty' {} 2>/dev/null \
56
| grep -oE '[0-9]+' | head -1)
57
[[ -z "${_elec_ver}" ]] && return 1
58
(( _elec_ver == _electronversion )) && c=32 || c=31
59
echo -e "Electron version: \033[1;${c}m${_elec_ver}$([[ $c -eq 31 ]] && echo " (expected ${_electronversion})")\033[0m"
60
}
61
_set_build_env() {
62
export ELECTRON_DIST="/usr/lib/electron${_electronversion}"
63
export ELECTRON_OVERRIDE_DIST_PATH="${ELECTRON_DIST}"
64
export ELECTRON_SKIP_BINARY_DOWNLOAD=1
65
export ELECTRON_BUILDER_OFFLINE=true
66
export SYSTEM_ELECTRON_VERSION="$(electron${_electronversion} -v | sed 's/^v//')"
67
export HOME="${srcdir}/.home"
68
export XDG_CACHE_HOME="${HOME}/.cache"
69
export XDG_CONFIG_HOME="${HOME}/.config"
70
export XDG_DATA_HOME="${HOME}/.local/share"
71
export npm_config_cache="${HOME}/.npm_cache"
72
export COREPACK_NPM_REGISTRY="${COREPACK_NPM_REGISTRY:-${NPM_CONFIG_REGISTRY:-https://registry.npmjs.org}}"
73
export COREPACK_HOME="${HOME}/.corepack"
74
export npm_config_audit=false
75
export npm_config_registry="${NPM_CONFIG_REGISTRY:-${npm_config_registry:-https://registry.npmjs.org}}"
76
mkdir -p "${HOME}" "${npm_config_cache}" "${COREPACK_HOME}"
77
}
78
prepare() {
79
cd "$(_get_project_dir)"
80
_get_electron_version
81
sed -i -e "
82
s/@electronversion@/${_electronversion}/g
83
s/@appname@/${pkgname%-git}/g
84
" "${srcdir}/${pkgname%-git}.sh" "${srcdir}/${pkgname%-git}.js"
85
gendesk -q -f -n \
86
--pkgname="${pkgname%-git}" \
87
--pkgdesc="${pkgdesc}" \
88
--categories="Development" \
89
--name="${pkgname%-git}" \
90
--exec="${pkgname%-git} %U"
91
_ensure_local_nvm
92
_set_build_env
93
jq --arg ver "${SYSTEM_ELECTRON_VERSION}" '.devDependencies.electron = $ver' package.json > package.json.tmp && mv package.json.tmp package.json
94
export NODE_ENV=development
95
npm install --legacy-peer-deps
96
}
97
build() {
98
cd "$(_get_project_dir)"
99
_ensure_local_nvm
100
_set_build_env
101
export NODE_ENV=production
102
npm run rebuild
103
npm run build
104
npm exec -c "electron-builder --linux dir -c.electronDist=${ELECTRON_DIST}"
105
rm -rf "$(_get_app_dir)/resources/default_app.asar"
106
}
107
package() {
108
install -Dm755 "${srcdir}/${pkgname%-git}.sh" "${pkgdir}/usr/bin/${pkgname%-git}"
109
install -Dm644 "${srcdir}/${pkgname%-git}.js" -t "${pkgdir}/usr/lib/${pkgname%-git}"
110
cp -a "$(_get_app_dir)/resources/." "${pkgdir}/usr/lib/${pkgname%-git}/"
111
install -Dm644 "$(_get_project_dir)/icons/icon.png" "${pkgdir}/usr/share/icons/hicolor/64x64/apps/${pkgname%-git}.png"
112
install -Dm644 "$(_get_project_dir)/${pkgname%-git}.desktop" -t "${pkgdir}/usr/share/applications"
113
install -Dm644 "$(_get_project_dir)/LICENSE" -t "${pkgdir}/usr/share/licenses/${pkgname}"
114
}
115
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-26 11:44:54 | Low | 2 |