pele

LOW

maintainer nvidiahater 0 votes scanned 2026-11-04 10:06:54.832549

View on AUR

Why flagged

The package builds from an npm registry source, which is normal for Node.js packages; the low severity is due to few votes and recent upload, not inherent risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from an npm registry source, which is normal for Node.js packages; the low severity is due to few votes and recent upload, not inherent risk.

PKGBUILD

      1pkgname=pele
    
      2pkgver=1.13.0
    
      3pkgrel=1
    
      4pkgdesc="Fast, lightweight Mermaid renderer that outputs themeable SVG"
    
      5arch=('any')
    
      6url="https://github.com/obsidianmd/pele"
    
      7license=('MIT')
    
      8depends=('nodejs>=20')
    
      9conflicts=('pele-git')
    
      10source=("https://registry.npmjs.org/${pkgname}/-/${pkgname}-${pkgver}.tgz")
    
      11noextract=("${pkgname}-${pkgver}.tgz")
    
      12sha256sums=('00f879d86c5a6ece897ef70e18fd228a9952bba338a0cb1293b373900d7414bd')
    
      13
    
      14package() {
    
      15  local module_dir="${pkgdir}/usr/lib/node_modules/${pkgname}"
    
      16
    
      17  install -d "${module_dir}"
    
      18  bsdtar -xf "${pkgname}-${pkgver}.tgz" -C "${module_dir}" \
    
      19    --strip-components 1 --no-same-owner
    
      20  install -Dm644 "${module_dir}/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      21}
    
      22

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-04 10:06:54	Low	2