sqlectron-gui-git
The package builds from the project's own Git repository, removes development dependencies, and bundles the app using standard Electron tooling; the variable-named dependency is a common Electron wrapper package, not an untrusted external install.
Triggered rules
llm_review
The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-07-25) reviewed it and judged it LOW (confidence 95%): The package builds from the project's own Git repository, removes development dependencies, and bundles the app using standard Electron tooling; the variable-named dependency is a common Electron wrapper package, not an untrusted external install.
-
PKGBUILD:85
HOME="$srcdir/.electron-gyp" npm install "${electron_build_opts[@]/#/--}"
PKGBUILD
1 offending line(s) highlighted# Maintainer: surefire@cryptomile.net
pkgname=sqlectron-gui-git
_electron=electron6
pkgver=1.32.0+24+gf4bdaba
pkgrel=1
pkgdesc="A simple and lightweight SQL client with cross database and platform support"
arch=('x86_64')
url="https://sqlectron.github.io/"
license=('MIT')
depends=($_electron)
makedepends=(
'asar'
'git'
'libsass'
'npm'
'python2'
)
conflicts=('sqlectron-gui')
provides=('sqlectron-gui')
source=(
"${pkgname}::git+https://github.com/sqlectron/sqlectron-gui.git"
'sqlectron-gui.desktop'
)
sha1sums=('SKIP'
'b9fb3bc29a17dee5de9295e2fdb2b3025ed51d1f')
case "$CARCH" in
i686) _arch=ia32;;
x86_64) _arch=x64;;
aarch64) _arch=arm64;;
*) _arch=DUMMY;;
esac
pkgver() {
cd "${pkgname}"
git describe --tags --long | sed 's/-/+/g; s/^v//'
}
prepare() {
cd "${pkgname}"
# remove extra dependencies
sed -i package.json \
-e '/"postinstall":/ d' \
-e '/"electron":/ d' \
-e '/"electron-builder":/ d' \
-e '/"spawn-auto-restart":/ d' \
-e '/"webpack-dev-middleware":/ d' \
-e '/"webpack-dev-server":/ d' \
-e '/"webpack-cli":/ s/,$//'
}
build() {
cd "${pkgname}"
export SKIP_SASS_BINARY_DOWNLOAD_FOR_CI=1
export SASS_FORCE_BUILD=1
export LIBSASS_EXT=auto
export npm_config_optional=false
export npm_config_build_from_source=true
export npm_config_sqlite=/usr
npm install
npm run compile:browser
npm run compile:renderer
mkdir app
mv -t app out
cp -rt app build package.json
cd app
local electron_build_opts=(
production
arch=$_arch
runtime=electron
disturl=https://electronjs.org/headers
target=$(</usr/lib/$_electron/version)
target_arch=$_arch
use_system_libusb=true
)
HOME="$srcdir/.electron-gyp" npm install "${electron_build_opts[@]/#/--}"
cat <<-EOF > ../sqlectron-gui
#!/usr/bin/sh
exec $_electron /usr/lib/sqlectron-gui/app.asar "\$@"
EOF
}
package() {
cd "${pkgname}"
asar p app app.asar
install -Dm0755 -t "${pkgdir}/usr/bin" sqlectron-gui
install -Dm0644 -t "${pkgdir}/usr/share/applications" ../sqlectron-gui.desktop
install -Dm0644 -t "${pkgdir}/usr/lib/sqlectron-gui" app.asar
install -Dm0644 -t "${pkgdir}/usr/share/licenses/${pkgname}" LICENSE
install -Dm0644 build/app.png "${pkgdir}/usr/share/pixmaps/sqlectron-gui.png"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 1 |
| 2026-09-16 00:03:17 | Low | 1 |
| 2026-09-15 00:25:31 | Low | 1 |
| 2026-09-14 00:27:57 | Low | 1 |
| 2026-09-13 00:19:54 | Low | 1 |
| 2026-09-12 00:25:17 | Low | 1 |
| 2026-09-11 00:19:22 | Low | 1 |
| 2026-09-10 00:22:44 | Low | 1 |
| 2026-09-09 00:04:09 | Low | 1 |
| 2026-09-08 00:18:08 | Low | 1 |
| 2026-09-07 00:30:15 | Low | 1 |
| 2026-09-06 00:17:06 | Low | 1 |
| 2026-09-05 00:16:27 | Low | 1 |
| 2026-09-04 00:03:13 | Low | 1 |
| 2026-09-03 00:15:47 | Low | 1 |
| 2026-09-02 00:02:31 | Low | 1 |
| 2026-09-01 00:11:19 | Low | 1 |
| 2026-08-31 00:19:57 | Low | 1 |
| 2026-08-30 00:04:14 | Low | 1 |
| 2026-08-29 00:29:17 | Low | 1 |