simple-deadlock-mod-manager-git
LOW
maintainer jayyd-kit
0 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package builds from source using project-owned tools (pnpm, cargo) and installs only the resulting binaries; no external untrusted executables are pulled at runtime.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from source using project-owned tools (pnpm, cargo) and installs only the resulting binaries; no external untrusted executables are pulled at runtime.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
External install via pipx/uv/poetry/cargo/go/gem
alt_pkg_manager_install
A non-pip/npm package manager (pipx, uv, poetry, cargo install, go install, gem, conda…) fetches and builds an external package at build time, outside source=() and makepkg's checksums.
-
PKGBUILD:28
cargo install tauri-typegen
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Gabri3445
2
pkgname=simple-deadlock-mod-manager-git
3
pkgver=r174.970881e
4
pkgrel=1
5
pkgdesc="A simple mod manager for Deadlock"
6
arch=('x86_64' 'aarch64')
7
url="https://github.com/Gabri3445/simple-deadlock-mod-manager"
8
license=('AGPL-3.0-or-later')
9
depends=('cairo' 'desktop-file-utils' 'gdk-pixbuf2' 'glib2' 'gtk3' 'hicolor-icon-theme' 'libsoup3' 'pango' 'webkit2gtk-4.1' 'libunrar' 'zstd')
10
makedepends=('git' 'openssl' 'appmenu-gtk-module' 'libappindicator-gtk3' 'librsvg' 'cargo' 'pnpm' 'nodejs' 'libunrar' 'zstd')
11
provides=('simple-deadlock-mod-manager-git')
12
conflicts=('simple-deadlock-mod-manager' 'simple-deadlock-mod-manager-git')
13
source=("git+${url}.git")
14
sha256sums=('SKIP')
15
16
pkgver() {
17
cd simple-deadlock-mod-manager
18
( set -o pipefail
19
git describe --long --abbrev=7 2>/dev/null | sed 's/\([^-]*-g\)/r\1/;s/-/./g' ||
20
printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
21
)
22
}
23
24
prepare() {
25
cd simple-deadlock-mod-manager
26
pnpm install
27
cd src-tauri
28
cargo install tauri-typegen
29
cargo tauri-typegen generate
30
}
31
32
build() {
33
cd simple-deadlock-mod-manager
34
35
# Found this online
36
# No idea how or why, but it does not compile otherwise
37
# fun
38
export ZSTD_SYS_USE_PKG_CONFIG=1
39
export RUSTFLAGS="-L native=/usr/lib -C link-arg=-L/usr/lib -C link-arg=-l:libunrar.so"
40
export UNRAR_LIB_PATH=/usr/lib
41
42
pnpm tauri build -b deb
43
}
44
45
package() {
46
cp -a "simple-deadlock-mod-manager/src-tauri/target/release/bundle/deb/"*/data/* "${pkgdir}/"
47
}
48
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |