ivi-cli-bin
LOW
maintainer ShortArrow
0 votes
scanned 2026-10-20 09:27:54.737837
Why flagged
The package installs a prebuilt .NET binary from the project's official GitHub releases, which is normal for self-contained applications; the low severity is due to the binary not being built from source and a recent upload with few votes, but it poses no active threat.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt .NET binary from the project's official GitHub releases, which is normal for self-contained applications; the low severity is due to the binary not being built from source and a recent upload with few votes, but it poses no active threat.
PKGBUILD
1
# Maintainer: ShortArrow <bamboogeneral@shortarrow.jp>
2
3
# Built from the published linux-x64 self-contained release asset rather than
4
# from source or from the NuGet tool package. The `dotnet tool install` route
5
# needs the ASP.NET Core runtime (the CLI's runtimeconfig references
6
# Microsoft.AspNetCore.App), so an Arch user carrying only `dotnet-runtime`
7
# gets "No frameworks were found". A self-contained publish carries its own
8
# runtime and needs no .NET on the system at all.
9
10
pkgname=ivi-cli-bin
11
# The release version as tagged upstream. pacman refuses a `-` in pkgver, and
12
# without one vercmp still orders 0.5.0beta.1 after 0.4.0 and before
13
# 0.5.0beta.2 and 0.5.0, so a stable release upgrades a beta without an epoch.
14
_pkgver=0.5.0-beta.1
15
pkgver=${_pkgver//-/}
16
pkgrel=1
17
pkgdesc="Integrated CLI for managing, diagnosing, and operating VISA/IVI instruments (prebuilt binary)"
18
arch=('x86_64')
19
url="https://github.com/ShortArrow/ivi-cli"
20
license=('MIT' 'Apache-2.0')
21
# ldd on the shipped binary resolves libc/libdl/libm/libpthread/librt from
22
# glibc, libgcc_s.so.1 from libgcc and libstdc++.so.6 from libstdc++ — the two
23
# split packages rather than the gcc-libs metapackage, which would drag in ten
24
# more runtimes nothing here touches.
25
#
26
# The rest of the list is invisible to ldd because .NET dlopen()s it, so the
27
# entry was established by removing the package and running the CLI. ICU is
28
# not on it: the CLI runs with invariant globalization and starts without it.
29
#
30
# openssl — `ivicli visa scan` and `ivicli api start --tls-self-signed`
31
# load libssl.so.3 / libcrypto.so.3; with openssl removed,
32
# `visa scan` dies on "No usable version of libssl was found".
33
#
34
# zlib is loaded too, but by libssl rather than by the CLI, so openssl
35
# carries it and namcap reports an explicit entry as already satisfied.
36
depends=('glibc' 'libgcc' 'libstdc++' 'openssl')
37
provides=('ivi-cli')
38
conflicts=('ivi-cli')
39
# The single-file bundle appends its payload after the ELF image; stripping
40
# rewrites the file and destroys it. Without symbols to split out there is no
41
# debug package either, and leaving it on ships an empty /usr/src/debug dir.
42
options=('!strip' '!debug')
43
source=("$pkgname-$pkgver.zip::$url/releases/download/v$_pkgver/ivicli-$_pkgver-linux-x64.zip")
44
sha256sums=('9ed6a68cf920a23f10f2b8b2f483f8da86885b38c4bb925f0a82f86ee091cd10')
45
46
build() {
47
chmod +x "$srcdir/ivicli"
48
49
# `ivicli completion` supports bash, zsh and powershell only — there is no
50
# fish emitter upstream, so no fish completion is shipped.
51
"$srcdir/ivicli" completion bash > "$srcdir/ivicli.bash"
52
53
# The zsh emitter produces an eval-style snippet (defines _ivicli, then
54
# compdef). Two lines of packaging glue turn it into an autoloadable
55
# site-function: the #compdef tag so compinit binds it to `ivicli`, and the
56
# trailing call so the first Tab completes instead of only registering.
57
{
58
echo '#compdef ivicli'
59
"$srcdir/ivicli" completion zsh
60
echo '_ivicli "$@"'
61
} > "$srcdir/_ivicli"
62
}
63
64
package() {
65
install -Dm755 "$srcdir/ivicli" "$pkgdir/usr/bin/ivicli"
66
67
install -Dm644 "$srcdir/LICENSE-MIT" "$pkgdir/usr/share/licenses/$pkgname/LICENSE-MIT"
68
install -Dm644 "$srcdir/LICENSE-APACHE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE-APACHE"
69
install -Dm644 "$srcdir/THIRD-PARTY-NOTICES.md" "$pkgdir/usr/share/doc/$pkgname/THIRD-PARTY-NOTICES.md"
70
71
# The .pdb and .xml files in the release zip are debug symbols and XML doc
72
# comments for library consumers; neither belongs in a system package.
73
74
install -Dm644 "$srcdir/ivicli.bash" "$pkgdir/usr/share/bash-completion/completions/ivicli"
75
install -Dm644 "$srcdir/_ivicli" "$pkgdir/usr/share/zsh/site-functions/_ivicli"
76
}
77
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-20 09:27:54 | Low | 2 |