playball
maintainer Big-B
· 0 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The package installs a Node.js application from the official npm registry, which is the expected and trusted source for npm packages; the use of variables does not introduce untrusted code or supply-chain risk.
Triggered rules
LOW
AI review of an ambiguous pattern
llm_review
The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it LOW (confidence 95%): The package installs a Node.js application from the official npm registry, which is the expected and trusted source for npm packages; the use of variables does not introduce untrusted code or supply-chain risk.
-
PKGBUILD:22
npm install -g --prefix "$pkgdir/usr" $_npmname@$_npmver
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Brandon Mittman <brandonmittman@gmail.com>
2
_npmname=playball
3
_npmver=3.5.0
4
pkgname=playball
5
pkgver=3.5.0
6
pkgrel=1
7
pkgdesc="Watch MLB games from the comfort of your terminal"
8
arch=(any)
9
url="https://github.com/paaatrick/playball"
10
license=(MIT)
11
depends=('nodejs' 'npm')
12
optdepends=()
13
source=(https://registry.npmjs.org/$_npmname/-/$_npmname-$_npmver.tgz)
14
noextract=($_npmname-$_npmver.tgz)
15
sha1sums=(bfe5beb88b38a3e2cb425cac780a0bcfaf254de4)
16
17
package() {
18
cd $srcdir
19
local _npmdir="$pkgdir/usr/lib/node_modules/"
20
mkdir -p $_npmdir
21
cd $_npmdir
22
npm install -g --prefix "$pkgdir/usr" $_npmname@$_npmver
23
chown -R root:root "$pkgdir"
24
}
25
26
# vim:set ts=2 sw=2 et:
27
Changes since previous scan
--- PKGBUILD @ 2026-06-18 16:11+++ PKGBUILD @ 2026-08-03 00:08@@ -1,8 +1,8 @@ # Maintainer: Brandon Mittman <brandonmittman@gmail.com> _npmname=playball-_npmver=3.4.0+_npmver=3.5.0 pkgname=playball-pkgver=3.4.0+pkgver=3.5.0 pkgrel=1 pkgdesc="Watch MLB games from the comfort of your terminal" arch=(any)@@ -12,7 +12,7 @@ optdepends=() source=(https://registry.npmjs.org/$_npmname/-/$_npmname-$_npmver.tgz) noextract=($_npmname-$_npmver.tgz)-sha1sums=(583f169e360ae090481e2a08b94f6e063d5d9460)+sha1sums=(bfe5beb88b38a3e2cb425cac780a0bcfaf254de4) package() { cd $srcdirScan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 1 |
| 2026-08-02 00:16:08 | LOW | 1 |
| 2026-08-01 00:11:18 | LOW | 1 |
| 2026-07-31 00:14:10 | LOW | 1 |
| 2026-07-30 00:17:23 | LOW | 1 |
| 2026-07-29 00:25:53 | LOW | 1 |
| 2026-07-28 00:07:28 | LOW | 1 |
| 2026-07-27 00:24:32 | LOW | 1 |
| 2026-07-26 00:07:32 | LOW | 1 |
| 2026-07-25 00:13:44 | LOW | 1 |
| 2026-07-24 00:02:28 | LOW | 1 |
| 2026-07-23 21:26:05 | LOW | 1 |
| 2026-06-18 16:11:54 | CLEAN | 0 |