Flatsonar

org.freedesktop.Sdk.Extension.sbcl

by kjinho

Freedesktop SDK Extension for Common Lisp development (sbcl + qlot)

Sandboxed Suspicious publisher Apache-2.0
Install Source code

About

Freedesktop SDK Extension for Common Lisp development (sbcl + qlot)

Permissions

Fully sandboxed: no extra permissions requested.

Who publishes this

Something concrete is wrong: the id claims a namespace this repository does not own, or the build does things a build should not. Flatsonar warns twice.

  • org.freedesktop.Sdk.Extension.sbcl claims the org.freedesktop namespace but is hosted by github.com/kjinho and does not build the owner's code
    publisher:namespace
  • fetches from prdownloads.sourceforge.net over unencrypted http: anyone on the path can swap the bytes
    source:insecure-url
  • installs a prebuilt binary instead of building from source
    source:prebuilt
  • the build has network access: it can download things the manifest does not list
    build-options:--share=network

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.