prettier-plugin-java

LOW

maintainer rubin55 0 votes scanned 2026-10-22 01:33:44.947668

View on AUR

Why flagged

The package installs a Node.js plugin from the official npm registry, which is a trusted source; the low severity is due to few votes and recent upload, not inherent risk in the build process.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a Node.js plugin from the official npm registry, which is a trusted source; the low severity is due to few votes and recent upload, not inherent risk in the build process.

PKGBUILD

      1# Maintainer: Rubin Simons <me@rubin55.org>
    
      2
    
      3pkgname=prettier-plugin-java
    
      4pkgver=2.11.0
    
      5pkgrel=1
    
      6pkgdesc='Prettier Java Plugin'
    
      7arch=(any)
    
      8url=https://github.com/jhipster/prettier-java
    
      9license=(Apache-2.0)
    
      10depends=(prettier nodejs)
    
      11makedepends=(npm)
    
      12source=("https://registry.npmjs.org/${pkgname}/-/${pkgname}-${pkgver}.tgz")
    
      13noextract=("${pkgname}-${pkgver}.tgz")
    
      14sha256sums=('8948889699f98f6364513d2e6e7bcf4c9ff14b1a52f5c72dfef4344cbda784ff')
    
      15
    
      16package() {
    
      17    npm install -g --prefix "${pkgdir}/usr" --cache "${srcdir}/npm-cache" \
    
      18        --legacy-peer-deps \
    
      19        "${srcdir}/${pkgname}-${pkgver}.tgz"
    
      20}
    
      21

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-22 01:33:44	Low	2