sqlectron-gui-git

LOW
maintainer orphaned 1 votes scanned 2026-11-01 00:21:48.120785
View on AUR
Why flagged

The package builds from the project's own Git repository, removes development dependencies, and bundles the app using standard Electron tooling; the variable-named dependency is a common Electron wrapper package, not an untrusted external install.

Triggered rules

Low AI review of an ambiguous pattern llm_review

The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-07-25) reviewed it and judged it LOW (confidence 95%): The package builds from the project's own Git repository, removes development dependencies, and bundles the app using standard Electron tooling; the variable-named dependency is a common Electron wrapper package, not an untrusted external install.

  • PKGBUILD:85 HOME="$srcdir/.electron-gyp" npm install "${electron_build_opts[@]/#/--}"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: surefire@cryptomile.net
2
3pkgname=sqlectron-gui-git
4_electron=electron6
5pkgver=1.32.0+24+gf4bdaba
6pkgrel=1
7pkgdesc="A simple and lightweight SQL client with cross database and platform support"
8arch=('x86_64')
9url="https://sqlectron.github.io/"
10license=('MIT')
11depends=($_electron)
12makedepends=(
13 'asar'
14 'git'
15 'libsass'
16 'npm'
17 'python2'
18)
19conflicts=('sqlectron-gui')
20provides=('sqlectron-gui')
21source=(
22 "${pkgname}::git+https://github.com/sqlectron/sqlectron-gui.git"
23 'sqlectron-gui.desktop'
24)
25sha1sums=('SKIP'
26 'b9fb3bc29a17dee5de9295e2fdb2b3025ed51d1f')
27
28case "$CARCH" in
29 i686) _arch=ia32;;
30 x86_64) _arch=x64;;
31 aarch64) _arch=arm64;;
32 *) _arch=DUMMY;;
33esac
34
35pkgver() {
36 cd "${pkgname}"
37 git describe --tags --long | sed 's/-/+/g; s/^v//'
38}
39
40prepare() {
41 cd "${pkgname}"
42
43 # remove extra dependencies
44 sed -i package.json \
45 -e '/"postinstall":/ d' \
46 -e '/"electron":/ d' \
47 -e '/"electron-builder":/ d' \
48 -e '/"spawn-auto-restart":/ d' \
49 -e '/"webpack-dev-middleware":/ d' \
50 -e '/"webpack-dev-server":/ d' \
51 -e '/"webpack-cli":/ s/,$//'
52}
53
54build() {
55 cd "${pkgname}"
56
57 export SKIP_SASS_BINARY_DOWNLOAD_FOR_CI=1
58 export SASS_FORCE_BUILD=1
59 export LIBSASS_EXT=auto
60 export npm_config_optional=false
61 export npm_config_build_from_source=true
62 export npm_config_sqlite=/usr
63
64 npm install
65
66 npm run compile:browser
67 npm run compile:renderer
68
69 mkdir app
70 mv -t app out
71 cp -rt app build package.json
72
73 cd app
74
75 local electron_build_opts=(
76 production
77 arch=$_arch
78 runtime=electron
79 disturl=https://electronjs.org/headers
80 target=$(</usr/lib/$_electron/version)
81 target_arch=$_arch
82 use_system_libusb=true
83 )
84
85 HOME="$srcdir/.electron-gyp" npm install "${electron_build_opts[@]/#/--}"
86
87 cat <<-EOF > ../sqlectron-gui
88 #!/usr/bin/sh
89 exec $_electron /usr/lib/sqlectron-gui/app.asar "\$@"
90 EOF
91}
92
93package() {
94 cd "${pkgname}"
95
96 asar p app app.asar
97
98 install -Dm0755 -t "${pkgdir}/usr/bin" sqlectron-gui
99 install -Dm0644 -t "${pkgdir}/usr/share/applications" ../sqlectron-gui.desktop
100 install -Dm0644 -t "${pkgdir}/usr/lib/sqlectron-gui" app.asar
101 install -Dm0644 -t "${pkgdir}/usr/share/licenses/${pkgname}" LICENSE
102 install -Dm0644 build/app.png "${pkgdir}/usr/share/pixmaps/sqlectron-gui.png"
103}
104

Scan history

Scanned at (UTC)SeverityRules
2026-11-01 00:21:48 Low 1
2026-10-31 00:07:41 Low 1
2026-10-30 00:29:30 Low 1
2026-10-29 00:13:55 Low 1
2026-10-28 00:06:54 Low 1
2026-10-27 00:23:28 Low 1
2026-10-26 00:12:40 Low 1
2026-10-25 00:20:48 Low 1
2026-10-24 00:14:55 Low 1
2026-10-23 00:02:19 Low 1
2026-10-22 00:13:10 Low 1
2026-10-21 00:12:50 Low 1
2026-10-20 00:10:31 Low 1
2026-10-19 00:03:55 Low 1
2026-10-18 00:06:55 Low 1
2026-10-17 00:21:55 Low 1
2026-10-16 00:12:47 Low 1
2026-10-15 00:28:05 Low 1
2026-10-14 00:06:47 Low 1
2026-10-13 00:23:45 Low 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion