Search Criteria
Package Details: minify 2.24.19-1
Package Actions
| Git Clone URL: | https://aur.archlinux.org/minify.git (read-only, click to copy) |
|---|---|
| Package Base: | minify |
| Description: | Minifier CLI for HTML, CSS, JS, JSON, SVG and XML |
| Upstream URL: | https://github.com/tdewolff/minify |
| Keywords: | css html js json minifier minify svg web xml |
| Licenses: | MIT |
| Submitter: | 4679 |
| Maintainer: | 4679 (meepzh, tdewolff) |
| Last Packager: | tdewolff |
| Votes: | 17 |
| Popularity: | 0.033784 |
| First Submitted: | 2016-05-03 08:05 (UTC) |
| Last Updated: | 2026-10-03 22:35 (UTC) |
Dependencies (3)
- glibc (glibc-gitAUR, glibc-git-native-pgoAUR, glibc-eacAUR)
- go (go-gitAUR, gcc-go-gitAUR, goup-rsAUR, go-binAUR, gcc-go-snapshotAUR, gcc-go) (make)
- bash-completion (bash-completion-gitAUR) (optional) – command-line autocomplete with bash
Required by (1)
- kittehlist-git (make)
Latest Comments
1 2 3 4 Next › Last »
tdewolff commented on 2026-07-27 00:54 (UTC)
Thanks, I've updated the PKGBUILD
manticore commented on 2026-07-26 23:59 (UTC)
Last line removed because it did not achieve anything (except leaking the exit-status):
1) package() runs in a fakeroot subshell that makepkg forks and discards. 2) Sourcing defined _minify() and ran complete -F _minify minify in that subshell. 3) Subshell exits ~2 seconds later. The function and the complete registration die with it.
Zero observable effect. Modifying the active shell from a PKGBUILD should not be achievable by design — the packaging process has no channel into an already-running interactive shell.
manticore commented on 2026-07-26 23:48 (UTC) (edited on 2026-07-26 23:49 (UTC) by manticore)
tdewolff commented on 2026-07-26 22:52 (UTC)
Good point, what do you recommend?
manticore commented on 2026-07-26 00:19 (UTC)
The package() function sources a bash_completion file from the build directory using 'source cmd/minify/bash_completion', which executes the contents of that file in the current shell context during packaging. Sourcing arbitrary file content from an untrusted tarball during the package step is unusual and potentially dangerous if the upstream bash_completion file contains malicious shell code.
Can this be improved?
tdewolff commented on 2025-09-06 08:44 (UTC)
Thanks, this is now fixed.
marek22k commented on 2025-09-04 20:04 (UTC)
Unfortunately, I am having problems updating minify:
tdewolff commented on 2025-07-22 13:22 (UTC)
Thank you, should be fixed now
woodwose commented on 2025-07-21 15:11 (UTC) (edited on 2025-07-22 13:51 (UTC) by woodwose)
check() fails for minify 2.23.9-1:
marek22k commented on 2025-04-29 18:29 (UTC)
@tdewolff Works now, thanks for fixing!
1 2 3 4 Next › Last »