playball
LOW
maintainer Big-B
0 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package installs a Node.js application from the official npm registry using a version-pinned, checksummed tarball; the variable-based package name is resolved to a known source, posing no additional risk.
Triggered rules
Low
AI review of an ambiguous pattern
llm_review
The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it LOW (confidence 95%): The package installs a Node.js application from the official npm registry using a version-pinned, checksummed tarball; the variable-based package name is resolved to a known source, posing no additional risk.
-
PKGBUILD:22
npm install -g --prefix "$pkgdir/usr" $_npmname@$_npmver
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Brandon Mittman <brandonmittman@gmail.com>
2
_npmname=playball
3
_npmver=3.6.0
4
pkgname=playball
5
pkgver=3.6.0
6
pkgrel=1
7
pkgdesc="Watch MLB games from the comfort of your terminal"
8
arch=(any)
9
url="https://github.com/paaatrick/playball"
10
license=(MIT)
11
depends=('nodejs' 'npm')
12
optdepends=()
13
source=(https://registry.npmjs.org/$_npmname/-/$_npmname-$_npmver.tgz)
14
noextract=($_npmname-$_npmver.tgz)
15
sha1sums=(0cb2441f615f8fc27d41c4cfeee60fe8130d282c)
16
17
package() {
18
cd $srcdir
19
local _npmdir="$pkgdir/usr/lib/node_modules/"
20
mkdir -p $_npmdir
21
cd $_npmdir
22
npm install -g --prefix "$pkgdir/usr" $_npmname@$_npmver
23
chown -R root:root "$pkgdir"
24
}
25
26
# vim:set ts=2 sw=2 et:
27
Changes since previous scan
--- PKGBUILD @ 2026-09-04 00:03+++ PKGBUILD @ 2026-09-17 00:27@@ -1,8 +1,8 @@ # Maintainer: Brandon Mittman <brandonmittman@gmail.com> _npmname=playball-_npmver=3.5.0+_npmver=3.6.0 pkgname=playball-pkgver=3.5.0+pkgver=3.6.0 pkgrel=1 pkgdesc="Watch MLB games from the comfort of your terminal" arch=(any)@@ -12,7 +12,7 @@ optdepends=() source=(https://registry.npmjs.org/$_npmname/-/$_npmname-$_npmver.tgz) noextract=($_npmname-$_npmver.tgz)-sha1sums=(bfe5beb88b38a3e2cb425cac780a0bcfaf254de4)+sha1sums=(0cb2441f615f8fc27d41c4cfeee60fe8130d282c) package() { cd $srcdirScan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 1 |
| 2026-09-16 00:03:17 | Low | 1 |
| 2026-09-15 00:25:31 | Low | 1 |
| 2026-09-14 00:27:57 | Low | 1 |
| 2026-09-13 00:19:54 | Low | 1 |
| 2026-09-12 00:25:17 | Low | 1 |
| 2026-09-11 00:19:22 | Low | 1 |
| 2026-09-10 00:22:44 | Low | 1 |
| 2026-09-09 00:04:09 | Low | 1 |
| 2026-09-08 00:18:08 | Low | 1 |
| 2026-09-07 00:30:15 | Low | 1 |
| 2026-09-06 00:17:06 | Low | 1 |
| 2026-09-05 00:16:27 | Low | 1 |
| 2026-09-04 03:56:15 | Low | 1 |
| 2026-09-04 00:03:13 | Low | 1 |
| 2026-09-03 00:15:47 | Low | 1 |
| 2026-09-02 00:02:31 | Low | 1 |
| 2026-09-01 00:11:19 | Low | 1 |
| 2026-08-31 00:19:57 | Low | 1 |
| 2026-08-30 00:04:14 | Low | 1 |