paseo-cli-edge

LOW

maintainer xpufx 0 votes scanned 2026-09-01 09:47:42.175833

View on AUR

Why flagged

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: xpufx <github@xpufx.com>
    
      2
    
      3pkgname=paseo-cli-edge
    
      4_pkgname=cli
    
      5_npmscope=@getpaseo
    
      6pkgver=0.7.0
    
      7_tarball_sha='b3329fbae6e2da87b1feb36fa8c9a07367ee967d40239544c8f7c52af8ebe0c1'
    
      8_license_sha='79d5aedce6aa0adc547336dc1bd34c5cc9308ba110fac7079ed97515ee573ad3'
    
      9pkgrel=3
    
      10pkgdesc='Command-line interface for controlling Paseo AI coding agents (edge - latest upstream release by date, beta or stable)'
    
      11arch=('x86_64' 'aarch64')
    
      12url='https://github.com/getpaseo/paseo/tree/main/packages/cli'
    
      13license=('Apache-2.0')
    
      14depends=('nodejs' 'bash' 'glibc' 'gcc-libs')
    
      15makedepends=('npm')
    
      16provides=('paseo')
    
      17conflicts=('paseo' 'paseo-bin' 'paseo-cli-bun' 'paseo-cli' 'paseo-cli-beta')
    
      18source=("${_pkgname}-${pkgver}.tgz::https://registry.npmjs.org/${_npmscope}/${_pkgname}/-/${_pkgname}-${pkgver//_/-}.tgz"
    
      19        "LICENSE-${pkgver}::https://raw.githubusercontent.com/getpaseo/paseo/v${pkgver//_/-}/LICENSE")
    
      20noextract=("${_pkgname}-${pkgver}.tgz")
    
      21sha256sums=("$_tarball_sha"
    
      22            "$_license_sha")
    
      23options=('!strip')
    
      24
    
      25package() {
    
      26    npm install \
    
      27        --omit=dev \
    
      28        --no-audit \
    
      29        --no-fund \
    
      30        --cache "${srcdir}/npm-cache" \
    
      31        --prefix "${pkgdir}/usr/lib/${pkgname}" \
    
      32        "${srcdir}/${_pkgname}-${pkgver}.tgz"
    
      33
    
      34    rm -f "${pkgdir}/usr/lib/${pkgname}/package.json" \
    
      35        "${pkgdir}/usr/lib/${pkgname}/package-lock.json"
    
      36    grep -rlZ '^#!.*node' "${pkgdir}/usr/lib/${pkgname}/node_modules" \
    
      37        | xargs -0 -r sed -i '1{/^#!/d}'
    
      38
    
      39    # esbuild's postinstall is blocked by npm 10+ allowScripts; run it manually
    
      40    # must happen BEFORE the blanket chmod 644 (install.js validates the binary)
    
      41    node "${pkgdir}/usr/lib/${pkgname}/node_modules/esbuild/install.js" || true
    
      42
    
      43    find "${pkgdir}/usr/lib/${pkgname}/node_modules" -type f -perm /111 -exec chmod 644 {} +
    
      44
    
      45    # restore execute on esbuild binary (blanket chmod above stripped it)
    
      46    case "${CARCH}" in
    
      47        x86_64) _esbuild_arch=linux-x64 ;;
    
      48        aarch64) _esbuild_arch=linux-arm64 ;;
    
      49    esac
    
      50    chmod 755 "${pkgdir}/usr/lib/${pkgname}/node_modules/@esbuild/${_esbuild_arch}/bin/esbuild" 2>/dev/null || true
    
      51
    
      52    install -Dm755 /dev/stdin "${pkgdir}/usr/bin/paseo" <<'WRAPPER'
    
      53#!/bin/sh
    
      54exec /usr/bin/node /usr/lib/paseo-cli-edge/node_modules/@getpaseo/cli/bin/paseo "$@"
    
      55WRAPPER
    
      56
    
      57    rm -rf "${pkgdir}/usr/lib/${pkgname}/etc" \
    
      58        "${pkgdir}/usr/etc"
    
      59
    
      60    case "${CARCH}" in
    
      61        x86_64) _node_pty_prebuild=linux-x64 ;;
    
      62        aarch64) _node_pty_prebuild=linux-arm64 ;;
    
      63    esac
    
      64    while IFS= read -r -d '' _pty_prebuilds; do
    
      65        find "$_pty_prebuilds" -mindepth 1 -maxdepth 1 -type d \
    
      66            ! -name "${_node_pty_prebuild}" -exec rm -rf {} +
    
      67    done < <(find "${pkgdir}/usr/lib/${pkgname}/node_modules" -type d \
    
      68        -path '*/node-pty/prebuilds' -print0)
    
      69
    
      70
    
      71    chmod -R go-w "${pkgdir}/usr"
    
      72    find "${pkgdir}/usr" -type d -exec chmod 755 {} +
    
      73    chown -R root:root "${pkgdir}"
    
      74
    
      75    install -Dm644 "${srcdir}/LICENSE-${pkgver}" \
    
      76        "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      77}
    
      78

Changes since previous scan

--- PKGBUILD @ 2026-09-01 00:11
+++ PKGBUILD @ 2026-09-01 09:47
@@ -6,7 +6,7 @@
 pkgver=0.7.0
 _tarball_sha='b3329fbae6e2da87b1feb36fa8c9a07367ee967d40239544c8f7c52af8ebe0c1'
 _license_sha='79d5aedce6aa0adc547336dc1bd34c5cc9308ba110fac7079ed97515ee573ad3'
-pkgrel=1
+pkgrel=3
 pkgdesc='Command-line interface for controlling Paseo AI coding agents (edge - latest upstream release by date, beta or stable)'
 arch=('x86_64' 'aarch64')
 url='https://github.com/getpaseo/paseo/tree/main/packages/cli'
@@ -35,7 +35,19 @@
         "${pkgdir}/usr/lib/${pkgname}/package-lock.json"
     grep -rlZ '^#!.*node' "${pkgdir}/usr/lib/${pkgname}/node_modules" \
         | xargs -0 -r sed -i '1{/^#!/d}'
+
+    # esbuild's postinstall is blocked by npm 10+ allowScripts; run it manually
+    # must happen BEFORE the blanket chmod 644 (install.js validates the binary)
+    node "${pkgdir}/usr/lib/${pkgname}/node_modules/esbuild/install.js" || true
+
     find "${pkgdir}/usr/lib/${pkgname}/node_modules" -type f -perm /111 -exec chmod 644 {} +
+
+    # restore execute on esbuild binary (blanket chmod above stripped it)
+    case "${CARCH}" in
+        x86_64) _esbuild_arch=linux-x64 ;;
+        aarch64) _esbuild_arch=linux-arm64 ;;
+    esac
+    chmod 755 "${pkgdir}/usr/lib/${pkgname}/node_modules/@esbuild/${_esbuild_arch}/bin/esbuild" 2>/dev/null || true
 
     install -Dm755 /dev/stdin "${pkgdir}/usr/bin/paseo" <<'WRAPPER'
 #!/bin/sh

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-01 09:47:42	Low	1
2026-09-01 00:11:19	Clean	2
2026-08-31 23:46:20	Low	1