sqlectron-gui-git
The package builds from the project's own Git repository, removes development dependencies, and bundles the app using standard Electron tooling; the variable-named dependency is a common Electron wrapper package, not an untrusted external install.
Triggered rules
llm_review
The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-07-25) reviewed it and judged it LOW (confidence 95%): The package builds from the project's own Git repository, removes development dependencies, and bundles the app using standard Electron tooling; the variable-named dependency is a common Electron wrapper package, not an untrusted external install.
-
PKGBUILD:85
HOME="$srcdir/.electron-gyp" npm install "${electron_build_opts[@]/#/--}"
PKGBUILD
1 offending line(s) highlighted# Maintainer: surefire@cryptomile.net
pkgname=sqlectron-gui-git
_electron=electron6
pkgver=1.32.0+24+gf4bdaba
pkgrel=1
pkgdesc="A simple and lightweight SQL client with cross database and platform support"
arch=('x86_64')
url="https://sqlectron.github.io/"
license=('MIT')
depends=($_electron)
makedepends=(
'asar'
'git'
'libsass'
'npm'
'python2'
)
conflicts=('sqlectron-gui')
provides=('sqlectron-gui')
source=(
"${pkgname}::git+https://github.com/sqlectron/sqlectron-gui.git"
'sqlectron-gui.desktop'
)
sha1sums=('SKIP'
'b9fb3bc29a17dee5de9295e2fdb2b3025ed51d1f')
case "$CARCH" in
i686) _arch=ia32;;
x86_64) _arch=x64;;
aarch64) _arch=arm64;;
*) _arch=DUMMY;;
esac
pkgver() {
cd "${pkgname}"
git describe --tags --long | sed 's/-/+/g; s/^v//'
}
prepare() {
cd "${pkgname}"
# remove extra dependencies
sed -i package.json \
-e '/"postinstall":/ d' \
-e '/"electron":/ d' \
-e '/"electron-builder":/ d' \
-e '/"spawn-auto-restart":/ d' \
-e '/"webpack-dev-middleware":/ d' \
-e '/"webpack-dev-server":/ d' \
-e '/"webpack-cli":/ s/,$//'
}
build() {
cd "${pkgname}"
export SKIP_SASS_BINARY_DOWNLOAD_FOR_CI=1
export SASS_FORCE_BUILD=1
export LIBSASS_EXT=auto
export npm_config_optional=false
export npm_config_build_from_source=true
export npm_config_sqlite=/usr
npm install
npm run compile:browser
npm run compile:renderer
mkdir app
mv -t app out
cp -rt app build package.json
cd app
local electron_build_opts=(
production
arch=$_arch
runtime=electron
disturl=https://electronjs.org/headers
target=$(</usr/lib/$_electron/version)
target_arch=$_arch
use_system_libusb=true
)
HOME="$srcdir/.electron-gyp" npm install "${electron_build_opts[@]/#/--}"
cat <<-EOF > ../sqlectron-gui
#!/usr/bin/sh
exec $_electron /usr/lib/sqlectron-gui/app.asar "\$@"
EOF
}
package() {
cd "${pkgname}"
asar p app app.asar
install -Dm0755 -t "${pkgdir}/usr/bin" sqlectron-gui
install -Dm0644 -t "${pkgdir}/usr/share/applications" ../sqlectron-gui.desktop
install -Dm0644 -t "${pkgdir}/usr/lib/sqlectron-gui" app.asar
install -Dm0644 -t "${pkgdir}/usr/share/licenses/${pkgname}" LICENSE
install -Dm0644 build/app.png "${pkgdir}/usr/share/pixmaps/sqlectron-gui.png"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 1 |
| 2026-10-31 00:07:41 | Low | 1 |
| 2026-10-30 00:29:30 | Low | 1 |
| 2026-10-29 00:13:55 | Low | 1 |
| 2026-10-28 00:06:54 | Low | 1 |
| 2026-10-27 00:23:28 | Low | 1 |
| 2026-10-26 00:12:40 | Low | 1 |
| 2026-10-25 00:20:48 | Low | 1 |
| 2026-10-24 00:14:55 | Low | 1 |
| 2026-10-23 00:02:19 | Low | 1 |
| 2026-10-22 00:13:10 | Low | 1 |
| 2026-10-21 00:12:50 | Low | 1 |
| 2026-10-20 00:10:31 | Low | 1 |
| 2026-10-19 00:03:55 | Low | 1 |
| 2026-10-18 00:06:55 | Low | 1 |
| 2026-10-17 00:21:55 | Low | 1 |
| 2026-10-16 00:12:47 | Low | 1 |
| 2026-10-15 00:28:05 | Low | 1 |
| 2026-10-14 00:06:47 | Low | 1 |
| 2026-10-13 00:23:45 | Low | 1 |