ompweb

maintainer Particle_G · 0 votes · scanned 2026-08-18 01:38:17.845211

LOW

Why flagged The package installs a prebuilt Node.js application from a GitHub release by the maintainer, which is unverifiable but not inherently malicious; the source is data-only for installation and execution of project-owned code, with no obfuscated payloads or remote code execution.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt Node.js application from a GitHub release by the maintainer, which is unverifiable but not inherently malicious; the source is data-only for installation and execution of project-owned code, with no obfuscated payloads or remote code execution.

PKGBUILD

      1# Maintainer: ParticleG <particle_g@outlook.com>
    
      2
    
      3pkgname=ompweb
    
      4pkgver=0.3.1
    
      5pkgrel=2
    
      6pkgdesc='Web UI for the oh-my-pi coding agent'
    
      7arch=('x86_64')
    
      8url='https://github.com/kahme247/ompweb'
    
      9license=('MIT')
    
      10depends=('nodejs>=22.19.0' 'oh-my-pi')
    
      11options=('!strip' '!debug')
    
      12
    
      13_bundle_sha256='1f7601edb7cc60290f4d414da4f8b65714d4e3c1b60a79ca0c257bdb1097bc0e'
    
      14_bundle="$pkgname-$pkgver-x86_64.tar.gz"
    
      15source=("$_bundle::https://github.com/ParticleG/ompweb/releases/download/bundle-v$pkgver-$_bundle_sha256/$_bundle")
    
      16sha256sums=("$_bundle_sha256")
    
      17
    
      18package() {
    
      19  install -d "$pkgdir/usr/lib/node_modules/@kahme247"
    
      20  cp -a "$srcdir/ompweb" \
    
      21    "$pkgdir/usr/lib/node_modules/@kahme247/ompweb"
    
      22
    
      23  install -d "$pkgdir/usr/bin"
    
      24  ln -s "../lib/node_modules/@kahme247/ompweb/bin/omp-web.js" \
    
      25    "$pkgdir/usr/bin/ompweb"
    
      26
    
      27  install -Dm644 \
    
      28    "$srcdir/ompweb/LICENSE" \
    
      29    "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      30}
    
      31

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 01:38:17	LOW	2
2026-08-18 00:03:42	LOW	2
2026-08-17 13:36:23	LOW	2