unofficial-homestuck-collection-git
LOW
maintainer HurricanePootis
0 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The 'yarn add crc' in build() is a legitimate dependency needed for building the project; it is not obfuscated or malicious, and the package builds from source hosted on the project's official GitHub repository.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The 'yarn add crc' in build() is a legitimate dependency needed for building the project; it is not obfuscated or malicious, and the package builds from source hosted on the project's official GitHub repository.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
npm/yarn/pnpm install of an undeclared external package
npm_install_external
Runs `npm/yarn/pnpm install <package>` for a package not in source=(), pulling unpinned, unreviewed code at build time. Severity downgraded: the package declares/looks like a Node.js consumer, where build-time installs are expected.
-
PKGBUILD:30
yarn add crc
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: HurricanePootis <hurricanepootis@protonmail.com>
2
pkgname=unofficial-homestuck-collection-git
3
pkgver=2.7.2.r0.g6e65920
4
pkgrel=1
5
pkgdesc="An offline collection of Homestuck and its related works."
6
arch=('x86_64')
7
url="https://github.com/GiovanH/unofficial-homestuck-collection"
8
license=('GPL-3.0-only')
9
depends=('nspr' 'hicolor-icon-theme' 'libx11' 'libdrm' 'libxfixes' 'gtk3' 'libxext' 'libxcursor' 'libxrender' 'cairo' 'mesa' 'gcc-libs' 'alsa-lib' 'dbus' 'at-spi2-core' 'libxrandr' 'bash' 'expat' 'libxtst' 'glibc' 'libxcb' 'libxdamage' 'libxcomposite' 'libxi' 'pango' 'libcups' 'libxss' 'glib2' 'nss' 'gdk-pixbuf2')
10
makedepends=('nodejs-lts-jod' 'yarn' 'gendesk')
11
provides=(${pkgname::-4})
12
conflicts=(${pkgname::-4})
13
source=("git+$url.git")
14
sha256sums=('SKIP')
15
16
pkgver() {
17
cd "$srcdir/${pkgname::-4}"
18
git describe --long --tags --abbrev=7 | sed 's/\([^-]*-g\)/r\1/;s/-/./g;s/v//g'
19
}
20
21
22
prepare() {
23
cd "$srcdir"
24
sed -i 's/18.20/22/g' ${pkgname::-4}/package.json
25
26
}
27
28
build() {
29
cd "$srcdir/${pkgname::-4}"
30
yarn add crc #for now
31
SHARP_IGNORE_GLOBAL_LIBVIPS=true make build
32
}
33
34
package() {
35
cd "$srcdir"
36
37
gendesk -f \
38
--pkgname="${pkgname::-4}" \
39
--name="Unofficial Homestuck Collection" \
40
--comment="Unofficial Reader For Homestuck" \
41
--exec="${pkgname::-4}" \
42
--icon="${pkgname::-4}" \
43
--categories="AudioVideo;Graphics;Game"
44
45
install -dm755 "$pkgdir/usr/lib/${pkgname::-4}"
46
cp -a -T "$srcdir/${pkgname::-4}/dist_electron/linux-unpacked" "$pkgdir/usr/lib/${pkgname::-4}/"
47
48
install -Dm644 "$srcdir/${pkgname::-4}.desktop" "$pkgdir/usr/share/applications/${pkgname::-4}.desktop"
49
cd "$srcdir/${pkgname::-4}/build/icons"
50
for _size in 16 24 48 64 128 256 512 1024
51
do
52
install -Dm644 ${_size}x${_size}.png \
53
"$pkgdir/usr/share/icons/hicolor/${_size}x${_size}/apps/${pkgname::-4}.png"
54
done
55
install -dm755 "$pkgdir/usr/bin"
56
cat > "$pkgdir/usr/bin/${pkgname::-4}"<<EOF
57
#!/usr/bin/env sh
58
59
XDG_CONFIG_HOME=${XDG_CONFIG_HOME:-~/.config}
60
61
# Allow users to override command-line options
62
if [ -f "$XDG_CONFIG_HOME/homestuck-flags.conf" ]; then
63
HOMESTUCK_USER_FLAGS="\$(grep -v '^#' "\$XDG_CONFIG_HOME/homestuck-flags.conf")"
64
fi
65
66
# Launch (each word in VESKTOP_USER_FLAGS must be split)
67
# shellcheck disable=SC2086
68
echo \$HOMESTUCK_USER_FLAGS
69
exec /usr/lib/${pkgname::-4}/${pkgname::-4} \$HOMESTUCK_USER_FLAGS "\$@"
70
EOF
71
chmod 755 "$pkgdir/usr/bin/${pkgname::-4}"
72
}
73
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |