reolink-cli-bin

HIGH

maintainer dcelasun 0 votes scanned 2026-08-24 17:24:12.078683

View on AUR

Why flagged

`npx`/`bunx`/`pnpm dlx`/`deno run <url>` downloads AND runs a remote package at build time — the moral equivalent of piping a download into a shell.

Triggered rules

High npx/bunx/deno executes a remote package remote_code_tool

`npx`/`bunx`/`pnpm dlx`/`deno run <url>` downloads AND runs a remote package at build time — the moral equivalent of piping a download into a shell.

PKGBUILD:15 optdepends=('npm: set up the reolink AI-agent skill via `npx skills add`')

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: D. Can Celasun <can[at]dcc[dot]im>
    
      2
    
      3pkgname=reolink-cli-bin
    
      4_pkgname=reolink-cli
    
      5pkgver=0.13.0
    
      6pkgrel=1
    
      7pkgdesc="The CLI for devices manufactured by Reolink"
    
      8arch=('x86_64' 'aarch64')
    
      9url="https://github.com/reolink/reolink-cli"
    
      10license=('custom: proprietary')
    
      11# Prebuilt proprietary binaries: the EULA (section 2b) forbids modifying the
    
      12# Software, and stripping would alter the shipped ELFs.
    
      13options=(!strip)
    
      14depends=('glibc')
    
      15optdepends=('npm: set up the reolink AI-agent skill via `npx skills add`')
    
      16provides=('reolink-cli' 'reolink-gateway')
    
      17conflicts=('reolink-cli' 'reolink-gateway')
    
      18
    
      19source_x86_64=("${pkgname}-${pkgver}-x86_64.tar.gz::${url}/releases/download/v${pkgver}/${_pkgname}-${pkgver}-external-linux-x86_64.tar.gz")
    
      20source_aarch64=("${pkgname}-${pkgver}-aarch64.tar.gz::${url}/releases/download/v${pkgver}/${_pkgname}-${pkgver}-external-linux-arm64.tar.gz")
    
      21sha256sums_x86_64=('a976fff4579b96123b0cf20acee63e55f28d609a4d16a247df8a8f6929e57d63')
    
      22sha256sums_aarch64=('acc3c663c2ab43670140775571cc5c66a7217be070831d50278f62ed439ad48b')
    
      23
    
      24package() {
    
      25  local _arch=x86_64
    
      26  [ "$CARCH" = aarch64 ] && _arch=arm64
    
      27
    
      28  cd "${srcdir}/${_pkgname}-${pkgver}-external-linux-${_arch}"
    
      29
    
      30  # binaries
    
      31  install -Dm755 -t "${pkgdir}/usr/bin" bin/reolink-cli bin/reolink-gateway
    
      32
    
      33  # documentation
    
      34  install -Dm644 -t "${pkgdir}/usr/share/doc/${_pkgname}" README.md
    
      35
    
      36  # license: the EULA (section 3a) requires it and THIRD-PARTY-LICENSES.txt to
    
      37  # travel with the binaries unaltered
    
      38  install -Dm644 -t "${pkgdir}/usr/share/licenses/${_pkgname}" EULA.txt THIRD-PARTY-LICENSES.txt
    
      39}
    
      40

Changes since previous scan

--- PKGBUILD @ 2026-08-14 19:31
+++ PKGBUILD @ 2026-08-24 17:24
@@ -2,7 +2,7 @@
 
 pkgname=reolink-cli-bin
 _pkgname=reolink-cli
-pkgver=0.12.4
+pkgver=0.13.0
 pkgrel=1
 pkgdesc="The CLI for devices manufactured by Reolink"
 arch=('x86_64' 'aarch64')
@@ -18,8 +18,8 @@
 
 source_x86_64=("${pkgname}-${pkgver}-x86_64.tar.gz::${url}/releases/download/v${pkgver}/${_pkgname}-${pkgver}-external-linux-x86_64.tar.gz")
 source_aarch64=("${pkgname}-${pkgver}-aarch64.tar.gz::${url}/releases/download/v${pkgver}/${_pkgname}-${pkgver}-external-linux-arm64.tar.gz")
-sha256sums_x86_64=('d1be8672edbc572e4a93ce4abfeac0af3a67919cb20833de5297fce3e39408ce')
-sha256sums_aarch64=('dcfd6a28b6393f322f1005daefa79eb115467dd7aa6567c4f1343d5a2f70d066')
+sha256sums_x86_64=('a976fff4579b96123b0cf20acee63e55f28d609a4d16a247df8a8f6929e57d63')
+sha256sums_aarch64=('acc3c663c2ab43670140775571cc5c66a7217be070831d50278f62ed439ad48b')
 
 package() {
   local _arch=x86_64

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-24 17:24:12	High	1
2026-08-21 11:16:40	Clean	2
2026-08-21 11:15:01	High	1
2026-08-14 19:31:40	Clean	2
2026-08-14 19:29:30	High	1
2026-07-31 07:20:33	Clean	3
2026-07-31 07:17:22	High	2
2026-07-30 13:16:15	Clean	3
2026-07-30 13:14:23	High	2
2026-07-29 23:15:04	Clean	3
2026-07-29 23:13:22	High	2
2026-07-29 13:13:37	Clean	3
2026-07-29 13:11:48	High	2
2026-07-28 07:39:22	Clean	3
2026-07-28 07:37:32	High	2