paseo-cli-git
LOW
maintainer xpufx
0 votes
scanned 2026-09-06 00:17:06.051191
Why flagged
The package builds from the project's own git repository with a SKIP'd checksum, which is common for git sources, and performs standard build steps without executing untrusted remote code or installing prebuilt binaries from ambiguous sources.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from the project's own git repository with a SKIP'd checksum, which is common for git sources, and performs standard build steps without executing untrusted remote code or installing prebuilt binaries from ambiguous sources.
PKGBUILD
1
# Maintainer: xpufx <github@xpufx.com>
2
pkgname=paseo-cli-git
3
pkgver=0.7.2.r35.g78b285059
4
pkgrel=1
5
pkgdesc='Command-line interface for controlling Paseo AI coding agents (git - built from main)'
6
arch=('x86_64' 'aarch64')
7
url='https://github.com/getpaseo/paseo'
8
license=('Apache-2.0')
9
depends=('nodejs>=22' 'bash' 'glibc' 'gcc-libs')
10
makedepends=('git' 'npm')
11
provides=('paseo' 'paseo-cli')
12
conflicts=('paseo' 'paseo-bin' 'paseo-cli' 'paseo-cli-bun' 'paseo-cli-beta' 'paseo-cli-edge')
13
source=('paseo::git+https://github.com/getpaseo/paseo.git#branch=main')
14
sha256sums=('SKIP')
15
options=('!strip')
16
17
pkgver() {
18
cd "$srcdir/paseo"
19
# git describe --long gives v0.7.2-10-g92442e7 -> 0.7.2.r10.g92442e7
20
if git describe --long --tags >/dev/null 2>&1; then
21
git describe --long --tags | sed 's/^v//;s/\([^-]*-g\)/r\1/;s/-/./g'
22
else
23
printf "0.7.2.r%s.g%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
24
fi
25
}
26
27
build() {
28
cd "$srcdir/paseo"
29
# Monorepo: need to build server deps first (protocol, client, highlight, etc.)
30
npm ci
31
npm run build:server
32
}
33
34
package() {
35
cd "$srcdir/paseo"
36
37
local install_dir="${pkgdir}/usr/lib/${pkgname}"
38
mkdir -p "${install_dir}"
39
40
# Copy built monorepo artifacts needed at runtime
41
# Keep it minimal: package.json + built packages + node_modules
42
cp -r package.json packages "${install_dir}/" 2>/dev/null || true
43
# Use npm pack logic? Instead just copy the built CLI + its runtime deps
44
# Reuse the same install prefix approach as -edge but from built source
45
# We will run npm install --omit=dev in the install dir to get production deps
46
# But we already have node_modules from build, so copy and prune
47
cp -r node_modules "${install_dir}/" 2>/dev/null || true
48
49
# Prune dev deps and fix perms like -edge does
50
grep -rlZ '^#!.*node' "${install_dir}/node_modules" 2>/dev/null | xargs -0 -r sed -i '1{/^#!/d}' || true
51
find "${install_dir}/node_modules" -type f -perm /111 -exec chmod 644 {} + 2>/dev/null || true
52
53
case "${CARCH}" in
54
x86_64) _esbuild_arch=linux-x64 ;;
55
aarch64) _esbuild_arch=linux-arm64 ;;
56
esac
57
chmod 755 "${install_dir}/node_modules/@esbuild/${_esbuild_arch}/bin/esbuild" 2>/dev/null || true
58
59
install -Dm755 /dev/stdin "${pkgdir}/usr/bin/paseo" <<WRAPPER
60
#!/bin/sh
61
exec /usr/bin/node /usr/lib/${pkgname}/packages/cli/bin/paseo "\$@"
62
WRAPPER
63
64
rm -rf "${install_dir}/etc" "${pkgdir}/usr/etc" 2>/dev/null || true
65
66
case "${CARCH}" in
67
x86_64) _node_pty_prebuild=linux-x64 ;;
68
aarch64) _node_pty_prebuild=linux-arm64 ;;
69
esac
70
while IFS= read -r -d '' _pty_prebuilds; do
71
find "$_pty_prebuilds" -mindepth 1 -maxdepth 1 -type d ! -name "${_node_pty_prebuild}" -exec rm -rf {} +
72
done < <(find "${install_dir}/node_modules" -type d -path '*/node-pty/prebuilds' -print0 2>/dev/null || true)
73
74
# Prune musl prebuilds — Arch is glibc, musl ELFs will fail ldd (libc.musl-*.so.1)
75
# and are never loaded at runtime (Node picks -gnu). Saves ~300MB.
76
find "${install_dir}" -type d -name "*musl*" -prune -exec rm -rf {} + 2>/dev/null || true
77
find "${install_dir}" -type f -name "*musl*" -delete 2>/dev/null || true
78
79
chmod -R go-w "${pkgdir}/usr" 2>/dev/null || true
80
find "${pkgdir}/usr" -type d -exec chmod 755 {} + 2>/dev/null || true
81
chown -R root:root "${pkgdir}" 2>/dev/null || true
82
83
install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
84
}
85
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-06 00:01:42 | Low | 2 |