simple-deadlock-mod-manager-git
LOW
maintainer jayyd-kit
0 votes
scanned 2026-11-01 00:21:48.120785
Why flagged
The package builds from source using project-owned tools (pnpm, cargo) and installs only the resulting binaries; no external untrusted executables are pulled at runtime.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from source using project-owned tools (pnpm, cargo) and installs only the resulting binaries; no external untrusted executables are pulled at runtime.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
External install via pipx/uv/poetry/cargo/go/gem
alt_pkg_manager_install
A non-pip/npm package manager (pipx, uv, poetry, cargo install, go install, gem, conda…) fetches and builds an external package at build time, outside source=() and makepkg's checksums.
-
PKGBUILD:28
cargo install tauri-typegen
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Gabri3445
2
pkgname=simple-deadlock-mod-manager-git
3
pkgver=r174.970881e
4
pkgrel=1
5
pkgdesc="A simple mod manager for Deadlock"
6
arch=('x86_64' 'aarch64')
7
url="https://github.com/Gabri3445/simple-deadlock-mod-manager"
8
license=('AGPL-3.0-or-later')
9
depends=('cairo' 'desktop-file-utils' 'gdk-pixbuf2' 'glib2' 'gtk3' 'hicolor-icon-theme' 'libsoup3' 'pango' 'webkit2gtk-4.1' 'libunrar' 'zstd')
10
makedepends=('git' 'openssl' 'appmenu-gtk-module' 'libappindicator-gtk3' 'librsvg' 'cargo' 'pnpm' 'nodejs' 'libunrar' 'zstd')
11
provides=('simple-deadlock-mod-manager-git')
12
conflicts=('simple-deadlock-mod-manager' 'simple-deadlock-mod-manager-git')
13
source=("git+${url}.git")
14
sha256sums=('SKIP')
15
16
pkgver() {
17
cd simple-deadlock-mod-manager
18
( set -o pipefail
19
git describe --long --abbrev=7 2>/dev/null | sed 's/\([^-]*-g\)/r\1/;s/-/./g' ||
20
printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
21
)
22
}
23
24
prepare() {
25
cd simple-deadlock-mod-manager
26
pnpm install
27
cd src-tauri
28
cargo install tauri-typegen
29
cargo tauri-typegen generate
30
}
31
32
build() {
33
cd simple-deadlock-mod-manager
34
35
# Found this online
36
# No idea how or why, but it does not compile otherwise
37
# fun
38
export ZSTD_SYS_USE_PKG_CONFIG=1
39
export RUSTFLAGS="-L native=/usr/lib -C link-arg=-L/usr/lib -C link-arg=-l:libunrar.so"
40
export UNRAR_LIB_PATH=/usr/lib
41
42
pnpm tauri build -b deb
43
}
44
45
package() {
46
cp -a "simple-deadlock-mod-manager/src-tauri/target/release/bundle/deb/"*/data/* "${pkgdir}/"
47
}
48
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |