gnome-shell-extension-randomwallpaper
LOW
maintainer supermario
0 votes
scanned 2026-11-01 00:21:48.120785
Why flagged
The npx tsc command compiles TypeScript source code from the project's own repository, which is a normal part of the build process and not an execution of a remote package with untrusted code.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The npx tsc command compiles TypeScript source code from the project's own repository, which is a normal part of the build process and not an execution of a remote package with untrusted code.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
npx/bunx/deno executes a remote package
remote_code_tool
`npx`/`bunx`/`pnpm dlx`/`deno run <url>` downloads AND runs a remote package at build time — the moral equivalent of piping a download into a shell. Severity downgraded: Node.js consumer context.
-
PKGBUILD:36
npx tsc
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Mario Finelli <mario at finel dot li>
2
# Contributor: Igor Dyatlov <dyatlov.igor@protonmail.com>
3
4
pkgname=gnome-shell-extension-randomwallpaper
5
pkgver=3.2.0
6
pkgrel=3
7
pkgdesc="Random Wallpapers for Gnome 3"
8
arch=(any)
9
url=https://github.com/ifl0w/RandomWallpaperGnome3
10
license=(MIT)
11
depends=(gnome-shell)
12
makedepends=(blueprint-compiler git npm)
13
source=("RandomWallpaperGnome3::git+${url}.git#tag=v${pkgver}"
14
https://patch-diff.githubusercontent.com/raw/ifl0w/RandomWallpaperGnome3/pull/235.patch)
15
sha256sums=('ac621610da7d82f93439df72cfb0b89ce37f473520274cf5b6534f9fe6407088'
16
'1c365b1e696c804ffd3ea963d73a595e1ed2e757761384edbf31d6c2299ab257')
17
18
prepare() {
19
cd RandomWallpaperGnome3
20
patch -p1 -N -i "${srcdir}/235.patch"
21
npm ci
22
}
23
24
build() {
25
cd RandomWallpaperGnome3
26
27
local uuid="$(grep -Po '(?<="uuid": ")[^"]*' src/metadata.json)"
28
local schema=$(grep -Po '(?<="settings-schema": ")[^"]*' \
29
src/metadata.json).gschema.xml
30
mkdir "$uuid"
31
32
# UI
33
blueprint-compiler batch-compile "$uuid/ui" src/ui src/ui/*.blp
34
35
# JS
36
npx tsc
37
38
# schemas
39
mkdir "$uuid/schemas"
40
glib-compile-schemas --targetdir="$uuid/schemas" src/schemas
41
42
# static files
43
cp "src/schemas/$schema" "$uuid/schemas"
44
cp src/metadata.json "$uuid"
45
cp src/stylesheet.css "$uuid"
46
47
# pack into zip
48
local extra_source=()
49
for file in "$uuid"/*; do
50
extra_source+=("--extra-source=$file")
51
done
52
53
gnome-extensions pack "${extra_source[@]}" "$uuid"
54
}
55
56
package() {
57
cd RandomWallpaperGnome3
58
59
local uuid="$(grep -Po '(?<="uuid": ")[^"]*' src/metadata.json)"
60
local schema=$(grep -Po '(?<="settings-schema": ")[^"]*' \
61
src/metadata.json).gschema.xml
62
local destdir="${pkgdir}/usr/share/gnome-shell/extensions/${uuid}"
63
64
install -dm0755 "$destdir"
65
bsdtar xvf ${uuid}.shell-extension.zip -C "$destdir/" --no-same-owner
66
install -Dm0644 "$destdir/schemas/$schema" \
67
-t "$pkgdir/usr/share/glib-2.0/schemas/"
68
69
install -Dm0644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
70
71
# gnome-extensions pack doesn't seem to include the extra-source options
72
# no matter what I try, so we'll just manually add them to the package now...
73
cd "$uuid"
74
find ui -type f -name '*.ui' -exec install -Dm0644 {} -t "$destdir/ui/" \;
75
76
for s in adapter manager ui; do
77
find $s -type f -name '*.js' -exec install -Dm0644 {} -t "$destdir/$s/" \;
78
done
79
80
for js in *.js; do
81
[[ $js == extension.js ]] && continue
82
[[ $js == prefs.js ]] && continue
83
install -Dm0644 $js -t "$destdir/"
84
done
85
86
rm -rf "${destdir}/schemas"
87
}
88
89
# vim: set ts=2 sw=2 et:
90
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |