powershell-mmi-bin
LOW
maintainer ChrisTX
0 votes
scanned 2026-10-31 07:58:04.077835
Why flagged
The package installs a prebuilt .NET assembly from NuGet, a legitimate source, but the binary is not independently verifiable due to lack of published sources; however, it is used only by PowerShell modules and does not execute arbitrary remote code or exfiltrate data.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt .NET assembly from NuGet, a legitimate source, but the binary is not independently verifiable due to lack of published sources; however, it is used only by PowerShell modules and does not execute arbitrary remote code or exfiltrate data.
PKGBUILD
1
# Maintainer: Christian Pfeiffer <cpfeiffer at rev-crew dot info>
2
# shellcheck disable=SC2034,SC2154
3
# shellcheck shell=bash
4
5
pkgname=powershell-mmi-bin
6
_nugetid=Microsoft.Management.Infrastructure.Runtime.Unix
7
pkgver=3.0.0
8
pkgrel=1
9
pkgdesc="Microsoft.Management.Infrastructure (MMI) for PowerShell, Microsoft's build"
10
arch=('any')
11
url='https://www.nuget.org/packages/Microsoft.Management.Infrastructure.Runtime.Unix'
12
# The license the NuGet package declares. Its sources aren't published: the repository it links to has
13
# the code of version 2.0.0-preview.1 (powershell-mmi), whose API the assembly has, and its SBOM makes
14
# no assertion about the license.
15
license=('MIT')
16
depends=(
17
powershell
18
)
19
provides=("${pkgname%-bin}")
20
conflicts=("${pkgname%-bin}")
21
# PowerShell is built without MMI. It's only needed by modules built against PowerShell with it, e.g.
22
# PSScriptAnalyzer from the PowerShell Gallery. The package has no license text, MIT needs one, so it's
23
# taken from the repository the package links to.
24
_mmicommit="cf32fc695b32c2eae848b693395c09222fe1d2ae"
25
source=("$_nugetid.$pkgver.nupkg::https://api.nuget.org/v3-flatcontainer/${_nugetid,,}/$pkgver/${_nugetid,,}.$pkgver.nupkg"
26
"LICENSE-$_mmicommit::https://raw.githubusercontent.com/PowerShell/MMI/$_mmicommit/LICENSE")
27
noextract=("$_nugetid.$pkgver.nupkg")
28
sha512sums=('d8ae69c763aa128703ff2a159ff804fab46e22a4088759fc7017e1deda1227703caa72003dd20d2528b97b84f975e655e68a7afbe6100d9d63ee3490272580b7'
29
'7e1ffcc72def4f29168cc76548669481d96a75efb72f1fc11031261cf2981baee101b33016e12645f39c46ca1df1459eceb36d0175c4fc9508133ac6794c78d7')
30
b2sums=('bf6f4bd7d51ebbf0cce6ef4ea8bc0a3a5f84ab3a98fa2cff1c86ae70dc60bdcba2dd6398c163d02524a1e9ef226b05c41e2f515f57c583bdb44be53ceeb6f6c6'
31
'4a1ade89d01202c542792e88640f2e2cf73f010b7f735113cfd4e21958c9cf75c5bd6160f07c3458e3b54fc40a5473567b0c965937add36ce97b07a6df1c57f3')
32
33
package() {
34
local _pshome=/usr/lib/powershell-7
35
install -dm755 "$pkgdir$_pshome"
36
bsdtar -xOf "$_nugetid.$pkgver.nupkg" runtimes/unix/lib/netstandard1.6/Microsoft.Management.Infrastructure.dll \
37
>"$pkgdir$_pshome/Microsoft.Management.Infrastructure.dll"
38
chmod 644 "$pkgdir$_pshome/Microsoft.Management.Infrastructure.dll"
39
# Added to pwsh.deps.json by the powershell-deps hook of powershell, the .NET host only loads the
40
# assemblies it lists
41
install -dm755 "$pkgdir/usr/share/powershell/deps.d"
42
cat >"$pkgdir/usr/share/powershell/deps.d/microsoft-management-infrastructure.json" <<EOF
43
{
44
"targets": {
45
".NETCoreApp,Version=v10.0": {
46
"$_nugetid/$pkgver": {
47
"runtime": {
48
"Microsoft.Management.Infrastructure.dll": {
49
"assemblyVersion": "2.0.0.0",
50
"fileVersion": "2.0.0.0"
51
}
52
}
53
}
54
}
55
},
56
"libraries": {
57
"$_nugetid/$pkgver": {
58
"type": "package",
59
"serviceable": false,
60
"sha512": ""
61
}
62
}
63
}
64
EOF
65
install -Dm644 "LICENSE-$_mmicommit" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
66
}
67
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-31 07:58:04 | Low | 2 |