gnome-shell-extension-randomwallpaper
LOW
maintainer supermario
0 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The npx tsc command compiles TypeScript source code from the project's own repository using a standard development tool; this is a normal part of building the extension and does not execute untrusted remote code.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The npx tsc command compiles TypeScript source code from the project's own repository using a standard development tool; this is a normal part of building the extension and does not execute untrusted remote code.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
npx/bunx/deno executes a remote package
remote_code_tool
`npx`/`bunx`/`pnpm dlx`/`deno run <url>` downloads AND runs a remote package at build time — the moral equivalent of piping a download into a shell. Severity downgraded: Node.js consumer context.
-
PKGBUILD:33
npx tsc
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Mario Finelli <mario at finel dot li>
2
# Contributor: Igor Dyatlov <dyatlov.igor@protonmail.com>
3
4
pkgname=gnome-shell-extension-randomwallpaper
5
pkgver=3.2.0
6
pkgrel=1
7
pkgdesc="Random Wallpapers for Gnome 3"
8
arch=(any)
9
url=https://github.com/ifl0w/RandomWallpaperGnome3
10
license=(MIT)
11
depends=(gnome-shell)
12
makedepends=(blueprint-compiler git npm)
13
source=("RandomWallpaperGnome3::git+${url}.git#tag=v${pkgver}")
14
sha256sums=('ac621610da7d82f93439df72cfb0b89ce37f473520274cf5b6534f9fe6407088')
15
16
prepare() {
17
cd RandomWallpaperGnome3
18
npm ci
19
}
20
21
build() {
22
cd RandomWallpaperGnome3
23
24
local uuid="$(grep -Po '(?<="uuid": ")[^"]*' src/metadata.json)"
25
local schema=$(grep -Po '(?<="settings-schema": ")[^"]*' \
26
src/metadata.json).gschema.xml
27
mkdir "$uuid"
28
29
# UI
30
blueprint-compiler batch-compile "$uuid/ui" src/ui src/ui/*.blp
31
32
# JS
33
npx tsc
34
35
# schemas
36
mkdir "$uuid/schemas"
37
glib-compile-schemas --targetdir="$uuid/schemas" src/schemas
38
39
# static files
40
cp "src/schemas/$schema" "$uuid/schemas"
41
cp src/metadata.json "$uuid"
42
cp src/stylesheet.css "$uuid"
43
44
# pack into zip
45
local extra_source=()
46
for file in "$uuid"/*; do
47
extra_source+=("--extra-source=$file")
48
done
49
50
gnome-extensions pack "${extra_source[@]}" "$uuid"
51
}
52
53
package() {
54
cd RandomWallpaperGnome3
55
56
local uuid="$(grep -Po '(?<="uuid": ")[^"]*' src/metadata.json)"
57
local schema=$(grep -Po '(?<="settings-schema": ")[^"]*' \
58
src/metadata.json).gschema.xml
59
local destdir="${pkgdir}/usr/share/gnome-shell/extensions/${uuid}"
60
61
install -dm0755 "$destdir"
62
bsdtar xvf ${uuid}.shell-extension.zip -C "$destdir/" --no-same-owner
63
install -Dm0644 "$destdir/schemas/$schema" \
64
-t "$pkgdir/usr/share/glib-2.0/schemas/"
65
66
install -Dm0644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
67
68
# gnome-extensions pack doesn't seem to include the extra-source options
69
# no matter what I try, so we'll just manually add them to the package now...
70
cd "$uuid"
71
find ui -type f -name '*.ui' -exec install -Dm0644 {} -t "$destdir/ui/" \;
72
73
for s in adapter manager ui; do
74
find $s -type f -name '*.js' -exec install -Dm0644 {} -t "$destdir/$s/" \;
75
done
76
77
for js in *.js; do
78
[[ $js == extension.js ]] && continue
79
[[ $js == prefs.js ]] && continue
80
install -Dm0644 $js -t "$destdir/"
81
done
82
83
rm -rf "${destdir}/schemas"
84
}
85
86
# vim: set ts=2 sw=2 et:
87
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |