Bitwarden v1.28.0-1 recent update question - AUR

Greetings lovely community,

It’s been about a week since I last updated my system and I noticed I had a few updates, so I ran sudo pacman -Syu first just to update the system packages and then ran yay to update the AUR packages (some were flagged out of date as well, but had no update, looking at you minecraft-launder!)

Anyways, I’m still relatively new to using and recognizing my way around pkgbuilding, updating, reading, etc. AUR packages so please bear with me if you may! I’ll leave my full output for the Bitwarden AUR package update below, but a few things stuck out to me and I’m unsure right now if I need to take any action or if it’s something normal that I can safely ignore. Below are just three errors/issues that stuck out to me (maybe there’s more who knows!). If anyone else uses the Bitwarden AUR package as well, I’d appreciate your input, since I’ve always just used the Bitwarden flatpak before I moved to EndeavourOS. Just to clarify though, Bitwarden did build successfully and it does launch and function as intended, I think this post is just meant to help me better understand AUR than to fix Bitwarden since it seems to work just fine. Hope that makes sense!

Issues #1:

found 3 moderate severity vulnerabilities
  run `npm audit fix` to fix them, or `npm audit` for details
npm WARN read-shrinkwrap This version of npm is compatible with lockfileVersion@1, but package-lock.json was generated for lockfileVersion@2. I'll try to do my best with it!
added 18 packages from 77 contributors and audited 95 packages in 0.895s

2 packages are looking for funding
  run `npm fund` for details

found 2 moderate severity vulnerabilities
  run `npm audit fix` to fix them, or `npm audit` for details
npm WARN read-shrinkwrap This version of npm is compatible with lockfileVersion@1, but package-lock.json was generated for lockfileVersion@2. I'll try to do my best with it!

> tldjs@2.3.1 postinstall /home/scott/.cache/yay/bitwarden/src/jslib-0a2ff12bedd55f5982fb8fe9102c4f20522f72e1/angular/node_modules/tldjs
> node ./bin/postinstall.js

added 32 packages from 20 contributors and audited 32 packages in 2.206s

2 packages are looking for funding
  run `npm fund` for details

Issues #2:

patch-package 6.4.7
Applying patches...
app-builder-lib@22.10.5 ✔
npm WARN optional SKIPPING OPTIONAL DEPENDENCY: dmg-license@1.0.9 (node_modules/dmg-license):
npm WARN notsup SKIPPING OPTIONAL DEPENDENCY: Unsupported platform for dmg-license@1.0.9: wanted {"os":"darwin","arch":"any"} (current: {"os":"linux","arch":"x64"})
npm WARN optional SKIPPING OPTIONAL DEPENDENCY: fsevents@1.2.13 (node_modules/watchpack-chokidar2/node_modules/fsevents):
npm WARN notsup SKIPPING OPTIONAL DEPENDENCY: Unsupported platform for fsevents@1.2.13: wanted {"os":"darwin","arch":"any"} (current: {"os":"linux","arch":"x64"})
npm WARN optional SKIPPING OPTIONAL DEPENDENCY: fsevents@1.2.13 (node_modules/glob-watcher/node_modules/fsevents):
npm WARN notsup SKIPPING OPTIONAL DEPENDENCY: Unsupported platform for fsevents@1.2.13: wanted {"os":"darwin","arch":"any"} (current: {"os":"linux","arch":"x64"})
npm WARN optional SKIPPING OPTIONAL DEPENDENCY: fsevents@2.3.2 (node_modules/fsevents):
npm WARN notsup SKIPPING OPTIONAL DEPENDENCY: Unsupported platform for fsevents@2.3.2: wanted {"os":"darwin","arch":"any"} (current: {"os":"linux","arch":"x64"})

added 1461 packages from 793 contributors and audited 1480 packages in 28.06s

114 packages are looking for funding
  run `npm fund` for details

found 15 vulnerabilities (1 low, 6 moderate, 8 high)
  run `npm audit fix` to fix them, or `npm audit` for details

> bitwarden@0.0.0 build /home/scott/.cache/yay/bitwarden/src/desktop-1.28.0
> concurrently -n Main,Rend -c yellow,cyan "npm run build:main" "npm run build:renderer"

Issues #3:

> bitwarden@0.0.0 clean:dist /home/scott/.cache/yay/bitwarden/src/desktop-1.28.0
> rimraf ./dist/*

  • electron-builder  version=22.10.5 os=5.10.56-1-lts
  • loaded configuration  file=package.json ("build" field)
  • writing effective config  file=dist/builder-effective-config.yaml
  • installing production dependencies  platform=linux arch=x64 appDir=/home/scott/.cache/yay/bitwarden/src/desktop-1.28.0/build
  • packaging       platform=linux arch=x64 electron=11.4.12 appOutDir=dist/linux-unpacked
  • copying Electron  source=/usr/lib/electron11 destination=/home/scott/.cache/yay/bitwarden/src/desktop-1.28.0/dist/linux-unpacked
## After sign

   ╭─────────────────────────────────────────────────╮
   │                                                 │
   │       Update available 22.10.5 → 22.11.7        │
   │   Run yarn upgrade electron-builder to update   │
   │                                                 │
   ╰─────────────────────────────────────────────────╯


For the full output (I know it’s a long one, I do apologize!):

[scott@endeavourOS ~]$ yay
[sudo] password for scott: 
:: Synchronizing package databases...
 core is up to date
 extra is up to date
 community                                                                               5.6 MiB  5.82 MiB/s 00:01 [---------------------------------------------------------------------] 100%
 multilib is up to date
 endeavouros is up to date
:: Starting full system upgrade...
 there is nothing to do
:: Searching databases for updates...
:: Searching AUR for updates...
 -> Flagged Out Of Date AUR Packages:  bitwarden  minecraft-launcher
:: 2 Packages to upgrade.
2  aur/bitwarden           1.27.1-2 -> 1.28.0-1
1  aur/optimus-manager-qt  1.6.3-1  -> 1.6.4-1
==> Packages to exclude: (eg: "1 2 3", "1-3", "^4" or repo name)
==> 
:: Checking for conflicts...
:: Checking for inner conflicts...
[Aur:2]  bitwarden-1.28.0-1  optimus-manager-qt-1.6.4-1

  2 bitwarden                        (Installed) (Build Files Exist)
  1 optimus-manager-qt               (Installed)
==> Packages to cleanBuild?
==> [N]one [A]ll [Ab]ort [I]nstalled [No]tInstalled or (1 2 3, 1-3, ^4)
==> 
:: Downloaded PKGBUILD (1/2): bitwarden
:: Downloaded PKGBUILD (2/2): optimus-manager-qt
  2 bitwarden                        (Installed) (Build Files Exist)
  1 optimus-manager-qt               (Installed) (Build Files Exist)
==> Diffs to show?
==> [N]one [A]ll [Ab]ort [I]nstalled [No]tInstalled or (1 2 3, 1-3, ^4)
==> 
:: (1/2) Parsing SRCINFO: bitwarden
:: (2/2) Parsing SRCINFO: optimus-manager-qt
==> Making package: bitwarden 1.28.0-1 (Fri 20 Aug 2021 06:39:28 PM CDT)
==> Retrieving sources...
  -> Downloading bitwarden-1.28.0.tar.gz...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   126  100   126    0     0    628      0 --:--:-- --:--:-- --:--:--   626
100 7558k    0 7558k    0     0  6347k      0 --:--:--  0:00:01 --:--:-- 13.9M
  -> Downloading jslib-0a2ff12bedd55f5982fb8fe9102c4f20522f72e1.tar.gz...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   157  100   157    0     0    760      0 --:--:-- --:--:-- --:--:--   762
100  509k    0  509k    0     0   750k      0 --:--:-- --:--:-- --:--:--  750k
  -> Found package.json.patch
  -> Found bitwarden.sh
  -> Found bitwarden.desktop
==> Validating source files with sha512sums...
    bitwarden-1.28.0.tar.gz ... Passed
    jslib-0a2ff12bedd55f5982fb8fe9102c4f20522f72e1.tar.gz ... Passed
    package.json.patch ... Passed
    bitwarden.sh ... Passed
    bitwarden.desktop ... Passed
==> Making package: optimus-manager-qt 1.6.4-1 (Fri 20 Aug 2021 06:39:31 PM CDT)
==> Retrieving sources...
  -> Downloading optimus-manager-qt-1.6.4.tar.gz...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   131  100   131    0     0    802      0 --:--:-- --:--:-- --:--:--   798
100   132  100   132    0     0    540      0 --:--:-- --:--:-- --:--:--   540
100  355k    0  355k    0     0   542k      0 --:--:-- --:--:-- --:--:--  542k
==> Validating source files with sha256sums...
    optimus-manager-qt-1.6.4.tar.gz ... Passed
==> Making package: bitwarden 1.28.0-1 (Fri 20 Aug 2021 06:39:33 PM CDT)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> Retrieving sources...
  -> Found bitwarden-1.28.0.tar.gz
  -> Found jslib-0a2ff12bedd55f5982fb8fe9102c4f20522f72e1.tar.gz
  -> Found package.json.patch
  -> Found bitwarden.sh
  -> Found bitwarden.desktop
==> Validating source files with sha512sums...
    bitwarden-1.28.0.tar.gz ... Passed
    jslib-0a2ff12bedd55f5982fb8fe9102c4f20522f72e1.tar.gz ... Passed
    package.json.patch ... Passed
    bitwarden.sh ... Passed
    bitwarden.desktop ... Passed
==> Removing existing $srcdir/ directory...
==> Extracting sources...
  -> Extracting bitwarden-1.28.0.tar.gz with bsdtar
  -> Extracting jslib-0a2ff12bedd55f5982fb8fe9102c4f20522f72e1.tar.gz with bsdtar
==> Starting prepare()...
patching file /home/scott/.cache/yay/bitwarden/src/desktop-1.28.0/package.json
==> Sources are ready.
==> Making package: bitwarden 1.28.0-1 (Fri 20 Aug 2021 06:39:36 PM CDT)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> WARNING: Using existing $srcdir/ tree
==> Starting build()...
Downloading and installing node v14.17.5...
Downloading https://nodejs.org/dist/v14.17.5/node-v14.17.5-linux-x64.tar.xz...
######################################################################################################################################################################################## 100.0%
Computing checksum with sha256sum
Checksums matched!
Now using node v14.17.5 (npm v6.14.14)
Creating default alias: default -> 14.17.5 (-> v14.17.5)
Now using node v14.17.5 (npm v6.14.14)
npm WARN read-shrinkwrap This version of npm is compatible with lockfileVersion@1, but package-lock.json was generated for lockfileVersion@2. I'll try to do my best with it!

> @nodert-win10-rs4/windows.security.credentials.ui@0.4.4 install /home/scott/.cache/yay/bitwarden/src/jslib-0a2ff12bedd55f5982fb8fe9102c4f20522f72e1/node_modules/@nodert-win10-rs4/windows.security.credentials.ui
> node-gyp rebuild

make: Entering directory '/home/scott/.cache/yay/bitwarden/src/jslib-0a2ff12bedd55f5982fb8fe9102c4f20522f72e1/node_modules/@nodert-win10-rs4/windows.security.credentials.ui/build'
  SOLINK_MODULE(target) Release/obj.target/binding.node
  COPY Release/binding.node
make: Leaving directory '/home/scott/.cache/yay/bitwarden/src/jslib-0a2ff12bedd55f5982fb8fe9102c4f20522f72e1/node_modules/@nodert-win10-rs4/windows.security.credentials.ui/build'

> keytar@7.6.0 install /home/scott/.cache/yay/bitwarden/src/jslib-0a2ff12bedd55f5982fb8fe9102c4f20522f72e1/node_modules/keytar
> prebuild-install || npm run build


> forcefocus@1.1.0 install /home/scott/.cache/yay/bitwarden/src/jslib-0a2ff12bedd55f5982fb8fe9102c4f20522f72e1/node_modules/forcefocus
> prebuild-install || node-gyp rebuild

prebuild-install WARN install No prebuilt binaries found (target=14.17.5 runtime=node arch=x64 libc= platform=linux)
make: Entering directory '/home/scott/.cache/yay/bitwarden/src/jslib-0a2ff12bedd55f5982fb8fe9102c4f20522f72e1/node_modules/forcefocus/build'
  CXX(target) Release/obj.target/forcefocus/src/bindings.o
In file included from ../src/bindings.cc:17:
/home/scott/.cache/node-gyp/14.17.5/include/node/node.h:758:7: warning: cast between incompatible function types from ‘void (*)(v8::Local<v8::Object>)’ to ‘node::addon_register_func’ {aka ‘void (*)(v8::Local<v8::Object>, v8::Local<v8::Value>, void*)’} [-Wcast-function-type]
  758 |       (node::addon_register_func) (regfunc),                          \
      |       ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
/home/scott/.cache/node-gyp/14.17.5/include/node/node.h:792:3: note: in expansion of macro ‘NODE_MODULE_X’
  792 |   NODE_MODULE_X(modname, regfunc, NULL, 0)  // NOLINT (readability/null_usage)
      |   ^~~~~~~~~~~~~
../src/bindings.cc:72:1: note: in expansion of macro ‘NODE_MODULE’
   72 | NODE_MODULE(module_name, bindings::Initialize)
      | ^~~~~~~~~~~
  CXX(target) Release/obj.target/forcefocus/src/forcefocus_noop.o
  SOLINK_MODULE(target) Release/obj.target/forcefocus.node
  COPY Release/forcefocus.node
make: Leaving directory '/home/scott/.cache/yay/bitwarden/src/jslib-0a2ff12bedd55f5982fb8fe9102c4f20522f72e1/node_modules/forcefocus/build'

> @scarf/scarf@1.1.0 postinstall /home/scott/.cache/yay/bitwarden/src/jslib-0a2ff12bedd55f5982fb8fe9102c4f20522f72e1/node_modules/@scarf/scarf
> node ./report.js


> core-js@3.13.1 postinstall /home/scott/.cache/yay/bitwarden/src/jslib-0a2ff12bedd55f5982fb8fe9102c4f20522f72e1/node_modules/core-js
> node -e "try{require('./postinstall')}catch(e){}"

Thank you for using core-js ( https://github.com/zloirock/core-js ) for polyfilling JavaScript standard library!

The project needs your help! Please consider supporting of core-js on Open Collective or Patreon: 
> https://opencollective.com/core-js 
> https://www.patreon.com/zloirock 

Also, the author of core-js ( https://github.com/zloirock ) is looking for a good job -)


> ngx-infinite-scroll@10.0.1 postinstall /home/scott/.cache/yay/bitwarden/src/jslib-0a2ff12bedd55f5982fb8fe9102c4f20522f72e1/node_modules/ngx-infinite-scroll
> opencollective-postinstall || exit 0

Thank you for using ngx-infinite-scroll!
If you rely on this package, please consider supporting our open collective:
> https://opencollective.com/ngx-infinite-scroll/donate


> tldjs@2.3.1 postinstall /home/scott/.cache/yay/bitwarden/src/jslib-0a2ff12bedd55f5982fb8fe9102c4f20522f72e1/node_modules/tldjs
> node ./bin/postinstall.js


> electron@11.4.5 postinstall /home/scott/.cache/yay/bitwarden/src/jslib-0a2ff12bedd55f5982fb8fe9102c4f20522f72e1/node_modules/electron
> node install.js


> nodemon@2.0.7 postinstall /home/scott/.cache/yay/bitwarden/src/jslib-0a2ff12bedd55f5982fb8fe9102c4f20522f72e1/node_modules/nodemon
> node bin/postinstall || exit 0

Love nodemon? You can now support the project via the open collective:
 > https://opencollective.com/nodemon/donate


> typemoq@2.1.0 postinstall /home/scott/.cache/yay/bitwarden/src/jslib-0a2ff12bedd55f5982fb8fe9102c4f20522f72e1/node_modules/typemoq
> postinstall-build dist

npm WARN optional SKIPPING OPTIONAL DEPENDENCY: fsevents@1.2.13 (node_modules/watchpack-chokidar2/node_modules/fsevents):
npm WARN notsup SKIPPING OPTIONAL DEPENDENCY: Unsupported platform for fsevents@1.2.13: wanted {"os":"darwin","arch":"any"} (current: {"os":"linux","arch":"x64"})
npm WARN optional SKIPPING OPTIONAL DEPENDENCY: fsevents@2.3.2 (node_modules/fsevents):
npm WARN notsup SKIPPING OPTIONAL DEPENDENCY: Unsupported platform for fsevents@2.3.2: wanted {"os":"darwin","arch":"any"} (current: {"os":"linux","arch":"x64"})

added 920 packages from 1289 contributors and audited 925 packages in 21.16s

49 packages are looking for funding
  run `npm fund` for details

found 3 moderate severity vulnerabilities
  run `npm audit fix` to fix them, or `npm audit` for details
npm WARN read-shrinkwrap This version of npm is compatible with lockfileVersion@1, but package-lock.json was generated for lockfileVersion@2. I'll try to do my best with it!
added 18 packages from 77 contributors and audited 95 packages in 0.895s

2 packages are looking for funding
  run `npm fund` for details

found 2 moderate severity vulnerabilities
  run `npm audit fix` to fix them, or `npm audit` for details
npm WARN read-shrinkwrap This version of npm is compatible with lockfileVersion@1, but package-lock.json was generated for lockfileVersion@2. I'll try to do my best with it!

> tldjs@2.3.1 postinstall /home/scott/.cache/yay/bitwarden/src/jslib-0a2ff12bedd55f5982fb8fe9102c4f20522f72e1/angular/node_modules/tldjs
> node ./bin/postinstall.js

added 32 packages from 20 contributors and audited 32 packages in 2.206s

2 packages are looking for funding
  run `npm fund` for details

found 0 vulnerabilities

npm WARN read-shrinkwrap This version of npm is compatible with lockfileVersion@1, but package-lock.json was generated for lockfileVersion@2. I'll try to do my best with it!

> @nodert-win10-rs4/windows.security.credentials.ui@0.4.4 install /home/scott/.cache/yay/bitwarden/src/desktop-1.28.0/node_modules/@nodert-win10-rs4/windows.security.credentials.ui
> node-gyp rebuild

make: Entering directory '/home/scott/.cache/yay/bitwarden/src/desktop-1.28.0/node_modules/@nodert-win10-rs4/windows.security.credentials.ui/build'
  SOLINK_MODULE(target) Release/obj.target/binding.node
  COPY Release/binding.node
make: Leaving directory '/home/scott/.cache/yay/bitwarden/src/desktop-1.28.0/node_modules/@nodert-win10-rs4/windows.security.credentials.ui/build'

> lzma-native@6.0.1 install /home/scott/.cache/yay/bitwarden/src/desktop-1.28.0/node_modules/lzma-native
> node-pre-gyp install --fallback-to-build && rimraf build

node-pre-gyp WARN Using request for node-pre-gyp https download 
[lzma-native] Success: "/home/scott/.cache/yay/bitwarden/src/desktop-1.28.0/node_modules/lzma-native/binding-v6.0.1-n-api-linux-x64/lzma_native.node" is installed via remote

> keytar@7.6.0 install /home/scott/.cache/yay/bitwarden/src/desktop-1.28.0/node_modules/keytar
> prebuild-install || npm run build


> forcefocus@1.1.0 install /home/scott/.cache/yay/bitwarden/src/desktop-1.28.0/node_modules/forcefocus
> prebuild-install || node-gyp rebuild

prebuild-install WARN install No prebuilt binaries found (target=14.17.5 runtime=node arch=x64 libc= platform=linux)
make: Entering directory '/home/scott/.cache/yay/bitwarden/src/desktop-1.28.0/node_modules/forcefocus/build'
  CXX(target) Release/obj.target/forcefocus/src/bindings.o
In file included from ../src/bindings.cc:17:
/home/scott/.cache/node-gyp/14.17.5/include/node/node.h:758:7: warning: cast between incompatible function types from ‘void (*)(v8::Local<v8::Object>)’ to ‘node::addon_register_func’ {aka ‘void (*)(v8::Local<v8::Object>, v8::Local<v8::Value>, void*)’} [-Wcast-function-type]
  758 |       (node::addon_register_func) (regfunc),                          \
      |       ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
/home/scott/.cache/node-gyp/14.17.5/include/node/node.h:792:3: note: in expansion of macro ‘NODE_MODULE_X’
  792 |   NODE_MODULE_X(modname, regfunc, NULL, 0)  // NOLINT (readability/null_usage)
      |   ^~~~~~~~~~~~~
../src/bindings.cc:72:1: note: in expansion of macro ‘NODE_MODULE’
   72 | NODE_MODULE(module_name, bindings::Initialize)
      | ^~~~~~~~~~~
  CXX(target) Release/obj.target/forcefocus/src/forcefocus_noop.o
  SOLINK_MODULE(target) Release/obj.target/forcefocus.node
  COPY Release/forcefocus.node
make: Leaving directory '/home/scott/.cache/yay/bitwarden/src/desktop-1.28.0/node_modules/forcefocus/build'

> @scarf/scarf@1.1.0 postinstall /home/scott/.cache/yay/bitwarden/src/desktop-1.28.0/node_modules/@scarf/scarf
> node ./report.js


    The dependency 'ngx-infinite-scroll' is tracking installation
    statistics using scarf-js (https://scarf.sh), which helps open-source developers
    fund and maintain their projects. Scarf securely logs basic installation
    details when this package is installed. The Scarf npm library is open source
    and permissively licensed at https://github.com/scarf-sh/scarf-js. For more
    details about your project's dependencies, try running 'npm ls'. To opt out of
    analytics, set the environment variable 'SCARF_ANALYTICS=false'.
  

> core-js@3.13.1 postinstall /home/scott/.cache/yay/bitwarden/src/desktop-1.28.0/node_modules/core-js
> node -e "try{require('./postinstall')}catch(e){}"


> ngx-infinite-scroll@10.0.1 postinstall /home/scott/.cache/yay/bitwarden/src/desktop-1.28.0/node_modules/ngx-infinite-scroll
> opencollective-postinstall || exit 0

Thank you for using ngx-infinite-scroll!
If you rely on this package, please consider supporting our open collective:
> https://opencollective.com/ngx-infinite-scroll/donate


> tldjs@2.3.1 postinstall /home/scott/.cache/yay/bitwarden/src/desktop-1.28.0/node_modules/tldjs
> node ./bin/postinstall.js


> electron@11.4.5 postinstall /home/scott/.cache/yay/bitwarden/src/desktop-1.28.0/node_modules/electron
> node install.js


> bitwarden@0.0.0 postinstall /home/scott/.cache/yay/bitwarden/src/desktop-1.28.0
> patch-package

patch-package 6.4.7
Applying patches...
app-builder-lib@22.10.5 ✔
npm WARN optional SKIPPING OPTIONAL DEPENDENCY: dmg-license@1.0.9 (node_modules/dmg-license):
npm WARN notsup SKIPPING OPTIONAL DEPENDENCY: Unsupported platform for dmg-license@1.0.9: wanted {"os":"darwin","arch":"any"} (current: {"os":"linux","arch":"x64"})
npm WARN optional SKIPPING OPTIONAL DEPENDENCY: fsevents@1.2.13 (node_modules/watchpack-chokidar2/node_modules/fsevents):
npm WARN notsup SKIPPING OPTIONAL DEPENDENCY: Unsupported platform for fsevents@1.2.13: wanted {"os":"darwin","arch":"any"} (current: {"os":"linux","arch":"x64"})
npm WARN optional SKIPPING OPTIONAL DEPENDENCY: fsevents@1.2.13 (node_modules/glob-watcher/node_modules/fsevents):
npm WARN notsup SKIPPING OPTIONAL DEPENDENCY: Unsupported platform for fsevents@1.2.13: wanted {"os":"darwin","arch":"any"} (current: {"os":"linux","arch":"x64"})
npm WARN optional SKIPPING OPTIONAL DEPENDENCY: fsevents@2.3.2 (node_modules/fsevents):
npm WARN notsup SKIPPING OPTIONAL DEPENDENCY: Unsupported platform for fsevents@2.3.2: wanted {"os":"darwin","arch":"any"} (current: {"os":"linux","arch":"x64"})

added 1461 packages from 793 contributors and audited 1480 packages in 28.06s

114 packages are looking for funding
  run `npm fund` for details

found 15 vulnerabilities (1 low, 6 moderate, 8 high)
  run `npm audit fix` to fix them, or `npm audit` for details

> bitwarden@0.0.0 build /home/scott/.cache/yay/bitwarden/src/desktop-1.28.0
> concurrently -n Main,Rend -c yellow,cyan "npm run build:main" "npm run build:renderer"

[Main] 
[Main] > bitwarden@0.0.0 build:main /home/scott/.cache/yay/bitwarden/src/desktop-1.28.0
[Main] > cross-env NODE_ENV=production webpack --config webpack.main.js
[Main] 
[Rend] 
[Rend] > bitwarden@0.0.0 build:renderer /home/scott/.cache/yay/bitwarden/src/desktop-1.28.0
[Rend] > gulp prebuild:renderer && cross-env NODE_ENV=production webpack --config webpack.renderer.js
[Rend] 
[Rend] [18:40:38] Using gulpfile ~/.cache/yay/bitwarden/src/desktop-1.28.0/gulpfile.js
[Rend] [18:40:38] Starting 'prebuild:renderer'...
[Rend] [18:40:38] Finished 'prebuild:renderer' after 653 ms
[Rend] Compiling @angular/animations : module as esm2015
[Rend] Compiling @angular/core : module as esm2015
[Rend] Compiling @angular/cdk/collections : module as esm2015
[Rend] Compiling @angular/common : module as esm2015
[Rend] Compiling @angular/animations/browser : module as esm2015
[Rend] Compiling @angular/platform-browser : module as esm2015
[Rend] Compiling @angular/cdk/bidi : module as esm2015
[Rend] Compiling @angular/cdk/platform : module as esm2015
[Rend] Compiling @angular/router : module as esm2015
[Rend] Compiling angular2-toaster : module as esm2015
[Rend] Compiling @angular/forms : module as esm2015
[Rend] Compiling @angular/platform-browser-dynamic : module as esm2015
[Rend] Compiling @angular/platform-browser/animations : module as esm2015
[Rend] Compiling @angular/cdk/scrolling : module as esm2015
[Rend] Compiling @angular/cdk/drag-drop : module as esm2015
[Rend] 
[Rend] Compiling @angular/core : module as esm2015
[Main] Hash: fa6659d9f09a3cd0a7c8
[Main] Version: webpack 4.46.0
[Main] Time: 18216ms
[Main] Built at: 08/20/2021 6:40:56 PM
[Main]                        Asset       Size  Chunks             Chunk Names
[Main]          images/fa-globe.png  344 bytes          [emitted]  
[Main]    images/icon-highlight.png   1.78 KiB          [emitted]  
[Main] images/icon-highlight@2x.png   2.07 KiB          [emitted]  
[Main]     images/icon-template.png   2.77 KiB          [emitted]  
[Main]  images/icon-template@2x.png   3.05 KiB          [emitted]  
[Main]              images/icon.ico     23 KiB          [emitted]  
[Main]              images/icon.png   28.4 KiB          [emitted]  
[Main]           images/loading.svg  291 bytes          [emitted]  
[Main]      images/logo-dark@2x.png     10 KiB          [emitted]  
[Main]     images/logo-white@2x.png   10.3 KiB          [emitted]  
[Main]      images/two-factor/0.png   5.91 KiB          [emitted]  
[Main]      images/two-factor/1.png   2.61 KiB          [emitted]  
[Main]      images/two-factor/2.png   1.18 KiB          [emitted]  
[Main]      images/two-factor/3.png   1.59 KiB          [emitted]  
[Main]      images/two-factor/4.png    4.7 KiB          [emitted]  
[Main]      images/two-factor/6.png   1.18 KiB          [emitted]  
[Main]            images/u2fkey.jpg    174 KiB          [emitted]  
[Main]           images/yubikey.jpg   27.5 KiB          [emitted]  
[Main]     locales/af/messages.json   44.1 KiB          [emitted]  
[Main]     locales/az/messages.json   47.6 KiB          [emitted]  
[Main]     locales/be/messages.json   54.9 KiB          [emitted]  
[Main]     locales/bg/messages.json   59.2 KiB          [emitted]  
[Main]     locales/bn/messages.json   61.4 KiB          [emitted]  
[Main]     locales/ca/messages.json   47.4 KiB          [emitted]  
[Main]     locales/cs/messages.json   46.3 KiB          [emitted]  
[Main]     locales/da/messages.json   44.7 KiB          [emitted]  
[Main]     locales/de/messages.json   46.9 KiB          [emitted]  
[Main]     locales/el/messages.json   62.3 KiB          [emitted]  
[Main]     locales/en/messages.json   44.3 KiB          [emitted]  
[Main]  locales/en_GB/messages.json   43.8 KiB          [emitted]  
[Main]  locales/en_IN/messages.json   43.8 KiB          [emitted]  
[Main]     locales/eo/messages.json   43.8 KiB          [emitted]  
[Main]     locales/es/messages.json   47.2 KiB          [emitted]  
[Main]     locales/et/messages.json   44.6 KiB          [emitted]  
[Main]     locales/fa/messages.json   55.5 KiB          [emitted]  
[Main]     locales/fi/messages.json   45.6 KiB          [emitted]  
[Main]    locales/fil/messages.json   43.8 KiB          [emitted]  
[Main]     locales/fr/messages.json   48.9 KiB          [emitted]  
[Main]     locales/he/messages.json   51.1 KiB          [emitted]  
[Main]     locales/hi/messages.json   43.8 KiB          [emitted]  
[Main]     locales/hr/messages.json   44.8 KiB          [emitted]  
[Main]     locales/hu/messages.json   47.6 KiB          [emitted]  
[Main]     locales/id/messages.json     45 KiB          [emitted]  
[Main]     locales/it/messages.json   46.6 KiB          [emitted]  
[Main]     locales/ja/messages.json   49.7 KiB          [emitted]  
[Main]     locales/kn/messages.json   73.8 KiB          [emitted]  
[Main]     locales/ko/messages.json   47.4 KiB          [emitted]  
[Main]     locales/lv/messages.json   46.5 KiB          [emitted]  
[Main]     locales/me/messages.json   45.2 KiB          [emitted]  
[Main]     locales/ml/messages.json   69.5 KiB          [emitted]  
[Main]     locales/nb/messages.json   45.2 KiB          [emitted]  
[Main]     locales/nl/messages.json   45.5 KiB          [emitted]  
[Main]     locales/pl/messages.json   46.1 KiB          [emitted]  
[Main]     locales/pt/messages.json   46.5 KiB          [emitted]  
[Main]  locales/pt_BR/messages.json   46.5 KiB          [emitted]  
[Main]  locales/pt_PT/messages.json   46.3 KiB          [emitted]  
[Main]     locales/ro/messages.json     47 KiB          [emitted]  
[Main]     locales/ru/messages.json   58.2 KiB          [emitted]  
[Main]     locales/si/messages.json   45.1 KiB          [emitted]  
[Main]     locales/sk/messages.json   46.3 KiB          [emitted]  
[Main]     locales/sl/messages.json   43.9 KiB          [emitted]  
[Main]     locales/sr/messages.json     56 KiB          [emitted]  
[Main]     locales/sv/messages.json   45.2 KiB          [emitted]  
[Main]     locales/th/messages.json   48.4 KiB          [emitted]  
[Main]     locales/tr/messages.json     46 KiB          [emitted]  
[Main]     locales/uk/messages.json   58.4 KiB          [emitted]  
[Main]     locales/vi/messages.json   48.3 KiB          [emitted]  
[Main]     locales/zh/messages.json   42.8 KiB          [emitted]  
[Main]  locales/zh_CN/messages.json   42.6 KiB          [emitted]  
[Main]  locales/zh_TW/messages.json   42.8 KiB          [emitted]  
[Main]                      main.js    131 KiB       0  [emitted]  main
[Main]                 package.json  781 bytes          [emitted]  
[Main] Entrypoint main = main.js
[Main]  [0] external "electron" 42 bytes {0} [built]
[Main]  [1] external "path" 42 bytes {0} [built]
[Main]  [2] external "fs" 42 bytes {0} [built]
[Main]  [3] ../jslib-0a2ff12bedd55f5982fb8fe9102c4f20522f72e1/electron/src/electronConstants.ts 894 bytes {0} [built]
[Main]  [4] external "node-ipc" 42 bytes {0} [built]
[Main]  [5] ../jslib-0a2ff12bedd55f5982fb8fe9102c4f20522f72e1/common/src/services/constants.service.ts 4.17 KiB {0} [built]
[Main]  [6] external "electron-updater" 42 bytes {0} [built]
[Main]  [7] external "electron-log" 42 bytes {0} [built]
[Main]  [8] external "os" 42 bytes {0} [built]
[Main]  [9] external "util" 42 bytes {0} [built]
[Main] [17] external "electron-reload" 42 bytes {0} [built]
[Main] [18] ../jslib-0a2ff12bedd55f5982fb8fe9102c4f20522f72e1/electron/src/biometric.windows.main.ts 5.71 KiB {0} [built]
[Main] [20] ../jslib-0a2ff12bedd55f5982fb8fe9102c4f20522f72e1/electron/src/biometric.darwin.main.ts 2.06 KiB {0} [built]
[Main] [21] ./src/main.ts + 18 modules 98.4 KiB {0} [built]
[Main]      | ./src/main.ts 7.19 KiB [built]
[Main]      | ./src/services/i18n.service.ts 1.01 KiB [built]
[Main]      | ./src/main/menu.main.ts 20.7 KiB [built]
[Main]      | ./src/main/messaging.main.ts 5.58 KiB [built]
[Main]      | ./src/main/powerMonitor.main.ts 3.15 KiB [built]
[Main]      | ../jslib-0a2ff12bedd55f5982fb8fe9102c4f20522f72e1/electron/src/keytarStorageListener.ts 2.94 KiB [built]
[Main]      | ../jslib-0a2ff12bedd55f5982fb8fe9102c4f20522f72e1/electron/src/services/electronLog.service.ts 1.21 KiB [built]
[Main]      | ../jslib-0a2ff12bedd55f5982fb8fe9102c4f20522f72e1/electron/src/services/electronMainMessaging.service.ts 1.88 KiB [built]
[Main]      | ../jslib-0a2ff12bedd55f5982fb8fe9102c4f20522f72e1/electron/src/services/electronStorage.service.ts 1.42 KiB [built]
[Main]      | ../jslib-0a2ff12bedd55f5982fb8fe9102c4f20522f72e1/electron/src/tray.main.ts 6.31 KiB [built]
[Main]      | ../jslib-0a2ff12bedd55f5982fb8fe9102c4f20522f72e1/electron/src/updater.main.ts 6.42 KiB [built]
[Main]      | ../jslib-0a2ff12bedd55f5982fb8fe9102c4f20522f72e1/electron/src/window.main.ts 12.1 KiB [built]
[Main]      | ./src/main/nativeMessaging.main.ts 11.1 KiB [built]
[Main]      | ../jslib-0a2ff12bedd55f5982fb8fe9102c4f20522f72e1/common/src/services/i18n.service.ts 6.24 KiB [built]
[Main]      | ../jslib-0a2ff12bedd55f5982fb8fe9102c4f20522f72e1/electron/src/baseMenu.ts 6.4 KiB [built]
[Main]      |     + 4 hidden modules
[Main] [22] ./src/entry.ts + 3 modules 6.02 KiB {0} [built]
[Main]      | ./src/entry.ts 1.01 KiB [built]
[Main]      | ./src/proxy/native-messaging-proxy.ts 580 bytes [built]
[Main]      | ./src/proxy/ipc.ts 1.43 KiB [built]
[Main]      | ./src/proxy/nativemessage.ts 3 KiB [built]
[Main]     + 8 hidden modules
[Rend] 
[Rend] Compiling @angular/common : module as esm2015
[Main] npm run build:main exited with code 0
[Rend] 
[Rend] Compiling @angular/router : module as esm2015
[Rend] 
[Rend] Compiling @angular/cdk/platform : module as esm2015
[Rend] 
[Rend] Compiling @angular/cdk/bidi : module as esm2015
[Rend] 
[Rend] Compiling @angular/cdk/collections : module as esm2015
[Rend] 
[Rend] Compiling @angular/cdk/scrolling : module as esm2015
[Rend] 
[Rend] Compiling @angular/cdk/drag-drop : module as esm2015
[Rend] 
[Rend] Compiling @angular/forms : module as esm2015
[Rend] DEPRECATION WARNING: Using / for division is deprecated and will be removed in Dart Sass 2.0.0.
[Rend] 
[Rend] Recommendation: math.div(30em, 14)
[Rend] 
[Rend] More info and automated migrator: https://sass-lang.com/d/slash-div
[Rend] 
[Rend]    ╷
[Rend] 12 │ $fa-li-width:         (30em / 14) !default;
[Rend]    │                        ^^^^^^^^^
[Rend]    ╵
[Rend]     node_modules/font-awesome/scss/_variables.scss 12:24  @import
[Rend]     node_modules/font-awesome/scss/font-awesome.scss 6:9  @import
[Rend]     src/scss/plugins.scss 2:9                             @import
[Rend]     src/scss/styles.scss 11:9                             root stylesheet
[Rend] 
[Rend] DEPRECATION WARNING: Using / for division is deprecated and will be removed in Dart Sass 2.0.0.
[Rend] 
[Rend] Recommendation: math.div(4em, 3)
[Rend] 
[Rend] More info and automated migrator: https://sass-lang.com/d/slash-div
[Rend] 
[Rend]   ╷
[Rend] 6 │   font-size: (4em / 3);
[Rend]   │               ^^^^^^^
[Rend]   ╵
[Rend]     node_modules/font-awesome/scss/_larger.scss 6:15       @import
[Rend]     node_modules/font-awesome/scss/font-awesome.scss 10:9  @import
[Rend]     src/scss/plugins.scss 2:9                              @import
[Rend]     src/scss/styles.scss 11:9                              root stylesheet
[Rend] 
[Rend] DEPRECATION WARNING: Using / for division is deprecated and will be removed in Dart Sass 2.0.0.
[Rend] 
[Rend] Recommendation: math.div(3em, 4)
[Rend] 
[Rend] More info and automated migrator: https://sass-lang.com/d/slash-div
[Rend] 
[Rend]   ╷
[Rend] 7 │   line-height: (3em / 4);
[Rend]   │                 ^^^^^^^
[Rend]   ╵
[Rend]     node_modules/font-awesome/scss/_larger.scss 7:17       @import
[Rend]     node_modules/font-awesome/scss/font-awesome.scss 10:9  @import
[Rend]     src/scss/plugins.scss 2:9                              @import
[Rend]     src/scss/styles.scss 11:9                              root stylesheet
[Rend] 
[Rend] DEPRECATION WARNING: Using / for division is deprecated and will be removed in Dart Sass 2.0.0.
[Rend] 
[Rend] Recommendation: math.div(18em, 14)
[Rend] 
[Rend] More info and automated migrator: https://sass-lang.com/d/slash-div
[Rend] 
[Rend]   ╷
[Rend] 4 │   width: (18em / 14);
[Rend]   │           ^^^^^^^^^
[Rend]   ╵
[Rend]     node_modules/font-awesome/scss/_fixed-width.scss 4:11  @import
[Rend]     node_modules/font-awesome/scss/font-awesome.scss 11:9  @import
[Rend]     src/scss/plugins.scss 2:9                              @import
[Rend]     src/scss/styles.scss 11:9                              root stylesheet
[Rend] 
[Rend] DEPRECATION WARNING: Using / for division is deprecated and will be removed in Dart Sass 2.0.0.
[Rend] 
[Rend] Recommendation: math.div(2em, 14)
[Rend] 
[Rend] More info and automated migrator: https://sass-lang.com/d/slash-div
[Rend] 
[Rend]    ╷
[Rend] 14 │   top: (2em / 14);
[Rend]    │         ^^^^^^^^
[Rend]    ╵
[Rend]     node_modules/font-awesome/scss/_list.scss 14:9         @import
[Rend]     node_modules/font-awesome/scss/font-awesome.scss 12:9  @import
[Rend]     src/scss/plugins.scss 2:9                              @import
[Rend]     src/scss/styles.scss 11:9                              root stylesheet
[Rend] 
[Rend] WARNING: 3 repetitive deprecation warnings omitted.
[Rend] 
[Rend] Hash: a79ea4a6021c1439e12b
[Rend] Version: webpack 4.46.0
[Rend] Time: 34460ms
[Rend] Built at: 08/20/2021 6:41:26 PM
[Rend]                             Asset       Size  Chunks                         Chunk Names
[Rend] app/main.a79ea4a6021c1439e12b.css    128 KiB       0  [emitted] [immutable]  app/main
[Rend]                       app/main.js   4.49 MiB       0  [emitted]              app/main
[Rend]                     app/vendor.js   5.86 MiB       1  [emitted]              app/vendor
[Rend]   fonts/Open_Sans-italic-300.woff   51.9 KiB          [emitted]              
[Rend]   fonts/Open_Sans-italic-400.woff   51.9 KiB          [emitted]              
[Rend]   fonts/Open_Sans-italic-600.woff   52.8 KiB          [emitted]              
[Rend]   fonts/Open_Sans-italic-700.woff   51.8 KiB          [emitted]              
[Rend]   fonts/Open_Sans-italic-800.woff   70.4 KiB          [emitted]              
[Rend]   fonts/Open_Sans-normal-300.woff   55.7 KiB          [emitted]              
[Rend]   fonts/Open_Sans-normal-400.woff     54 KiB          [emitted]              
[Rend]   fonts/Open_Sans-normal-600.woff   56.4 KiB          [emitted]              
[Rend]   fonts/Open_Sans-normal-700.woff   56.7 KiB          [emitted]              
[Rend]   fonts/Open_Sans-normal-800.woff   56.3 KiB          [emitted]              
[Rend]     fonts/fontawesome-webfont.eot    162 KiB          [emitted]              
[Rend]     fonts/fontawesome-webfont.svg    434 KiB          [emitted]              
[Rend]     fonts/fontawesome-webfont.ttf    162 KiB          [emitted]              
[Rend]    fonts/fontawesome-webfont.woff   95.7 KiB          [emitted]              
[Rend]   fonts/fontawesome-webfont.woff2   75.4 KiB          [emitted]              
[Rend]                images/loading.svg  291 bytes          [emitted]              
[Rend]           images/logo-dark@2x.png     10 KiB          [emitted]              
[Rend]          images/logo-white@2x.png   10.3 KiB          [emitted]              
[Rend]                images/yubikey.jpg   27.5 KiB          [emitted]              
[Rend]                        index.html  620 bytes          [emitted]              
[Rend] Entrypoint app/main = app/vendor.js app/main.a79ea4a6021c1439e12b.css app/main.js
[Rend]   [0] ./node_modules/@angular/core/__ivy_ngcc__/fesm2015/core.js 1.27 MiB {1} [built]
[Rend]   [1] ./node_modules/@angular/common/__ivy_ngcc__/fesm2015/common.js 217 KiB {1} [built]
[Rend]   [2] ./node_modules/@angular/forms/__ivy_ngcc__/fesm2015/forms.js + 1 modules 271 KiB {1} [built]
[Rend]       | ./node_modules/@angular/forms/__ivy_ngcc__/fesm2015/forms.js 268 KiB [built]
[Rend]       | ./node_modules/rxjs/_esm5/internal/observable/forkJoin.js 2.59 KiB [built]
[Rend]   [9] external "electron" 42 bytes {0} [built]
[Rend]  [14] ./node_modules/@angular/cdk/__ivy_ngcc__/fesm2015/scrolling.js + 20 modules 117 KiB {1} [built]
[Rend]       | ./node_modules/@angular/cdk/__ivy_ngcc__/fesm2015/scrolling.js 71.4 KiB [built]
[Rend]       | ./node_modules/rxjs/_esm5/internal/observable/fromEvent.js 2.67 KiB [built]
[Rend]       | ./node_modules/rxjs/_esm5/internal/scheduler/asap.js 300 bytes [built]
[Rend]       | ./node_modules/rxjs/_esm5/internal/util/isObservable.js 302 bytes [built]
[Rend]       | ./node_modules/rxjs/_esm5/internal/operators/distinctUntilChanged.js 2.15 KiB [built]
[Rend]       | ./node_modules/rxjs/_esm5/internal/operators/audit.js 2.47 KiB [built]
[Rend]       | ./node_modules/rxjs/_esm5/internal/observable/timer.js 1.34 KiB [built]
[Rend]       | ./node_modules/rxjs/_esm5/internal/operators/auditTime.js 431 bytes [built]
[Rend]       | ./node_modules/rxjs/_esm5/internal/operators/pairwise.js 1.17 KiB [built]
[Rend]       | ./node_modules/rxjs/_esm5/internal/scheduler/queue.js 312 bytes [built]
[Rend]       | ./node_modules/rxjs/_esm5/internal/observable/throwError.js 571 bytes [built]
[Rend]       | ./node_modules/rxjs/_esm5/internal/Notification.js 2.7 KiB [built]
[Rend]       | ./node_modules/rxjs/_esm5/internal/operators/observeOn.js 2.56 KiB [built]
[Rend]       | ./node_modules/rxjs/_esm5/internal/ReplaySubject.js 4.36 KiB [built]
[Rend]       | ./node_modules/rxjs/_esm5/internal/operators/shareReplay.js 2.24 KiB [built]
[Rend]       |     + 6 hidden modules
[Rend]  [16] ./node_modules/@angular/platform-browser/__ivy_ngcc__/fesm2015/platform-browser.js 82.9 KiB {1} [built]
[Rend]  [18] ./node_modules/angular2-toaster/__ivy_ngcc__/fesm2015/angular2-toaster.js 34 KiB {1} [built]
[Rend]  [29] ./node_modules/@angular/cdk/__ivy_ngcc__/fesm2015/drag-drop.js + 1 modules 169 KiB {1} [built]
[Rend]       | ./node_modules/@angular/cdk/__ivy_ngcc__/fesm2015/drag-drop.js 168 KiB [built]
[Rend]       | ./node_modules/rxjs/_esm5/internal/observable/interval.js 1.01 KiB [built]
[Rend]  [42] ./node_modules/rxjs/_esm5/index.js 3.33 KiB [built]
[Rend]  [59] ./node_modules/rxjs/_esm5/operators/index.js 6.15 KiB [built]
[Rend]  [86] ./node_modules/@angular/platform-browser/__ivy_ngcc__/fesm2015/animations.js + 1 modules 204 KiB {1} [built]
[Rend]       | ./node_modules/@angular/platform-browser/__ivy_ngcc__/fesm2015/animations.js 20.6 KiB [built]
[Rend]       | ./node_modules/@angular/animations/__ivy_ngcc__/fesm2015/browser.js 184 KiB [built]
[Rend]  [99] ./$$_lazy_route_resource lazy namespace object 160 bytes {0} [built]
[Rend] [129] ./node_modules/@angular/common/locales/af.js 7.2 KiB {1} [built]
[Rend] [175] ./src/scss/styles.scss 50 bytes {0} [built]
[Rend] [216] ./src/app/main.ts + 358 modules 1.6 MiB {0} [built]
[Rend]       | ./src/app/main.ts 663 bytes [built]
[Rend]       | ./jslib/electron/src/utils.ts 1.39 KiB [built]
[Rend]       | ./src/app/app.module.ts 12.6 KiB [built]
[Rend]       | ./jslib/angular/src/directives/api-action.directive.ts 2.06 KiB [built]
[Rend]       | ./jslib/angular/src/directives/box-row.directive.ts 2.13 KiB [built]
[Rend]       | ./jslib/angular/src/directives/autofocus.directive.ts 1.09 KiB [built]
[Rend]       | ./jslib/angular/src/directives/blur-click.directive.ts 1.07 KiB [built]
[Rend]       | ./jslib/angular/src/pipes/i18n.pipe.ts 858 bytes [built]
[Rend]       | ./src/app/accounts/hint.component.ts 5.98 KiB [built]
[Rend]       | ./jslib/angular/src/directives/stop-click.directive.ts 973 bytes [built]
[Rend]       | ./jslib/angular/src/directives/a11y-title.directive.ts 1.32 KiB [built]
[Rend]       | ./src/app/accounts/lock.component.ts 15.2 KiB [built]
[Rend]       | ./src/app/accounts/environment.component.ts 12.1 KiB [built]
[Rend]       | ./jslib/angular/src/components/modal.component.ts 4.04 KiB [built]
[Rend]       | ./src/app/accounts/login.component.ts 18.1 KiB [built]
[Rend]       |     + 344 hidden modules
[Rend]     + 304 hidden modules
[Rend] Child HtmlWebpackCompiler:
[Rend]                           Asset      Size  Chunks  Chunk Names
[Rend]     __child-HtmlWebpackPlugin_0  4.17 KiB       0  HtmlWebpackPlugin_0
[Rend]     Entrypoint HtmlWebpackPlugin_0 = __child-HtmlWebpackPlugin_0
[Rend]     [0] ./node_modules/html-webpack-plugin/lib/loader.js!./src/index.html 577 bytes {0} [built]
[Rend] Child mini-css-extract-plugin node_modules/css-loader/dist/cjs.js!node_modules/sass-loader/dist/cjs.js!src/scss/styles.scss:
[Rend]                               Asset       Size  Chunks             Chunk Names
[Rend]     fonts/Open_Sans-italic-300.woff   51.9 KiB          [emitted]  
[Rend]     fonts/Open_Sans-italic-400.woff   51.9 KiB          [emitted]  
[Rend]     fonts/Open_Sans-italic-600.woff   52.8 KiB          [emitted]  
[Rend]     fonts/Open_Sans-italic-700.woff   51.8 KiB          [emitted]  
[Rend]     fonts/Open_Sans-italic-800.woff   70.4 KiB          [emitted]  
[Rend]     fonts/Open_Sans-normal-300.woff   55.7 KiB          [emitted]  
[Rend]     fonts/Open_Sans-normal-400.woff     54 KiB          [emitted]  
[Rend]     fonts/Open_Sans-normal-600.woff   56.4 KiB          [emitted]  
[Rend]     fonts/Open_Sans-normal-700.woff   56.7 KiB          [emitted]  
[Rend]     fonts/Open_Sans-normal-800.woff   56.3 KiB          [emitted]  
[Rend]       fonts/fontawesome-webfont.eot    162 KiB          [emitted]  
[Rend]       fonts/fontawesome-webfont.svg    434 KiB          [emitted]  
[Rend]       fonts/fontawesome-webfont.ttf    162 KiB          [emitted]  
[Rend]      fonts/fontawesome-webfont.woff   95.7 KiB          [emitted]  
[Rend]     fonts/fontawesome-webfont.woff2   75.4 KiB          [emitted]  
[Rend]                  images/loading.svg  291 bytes          [emitted]  
[Rend]             images/logo-dark@2x.png     10 KiB          [emitted]  
[Rend]            images/logo-white@2x.png   10.3 KiB          [emitted]  
[Rend]     Entrypoint mini-css-extract-plugin = *
[Rend]      [0] ./node_modules/css-loader/dist/runtime/getUrl.js 830 bytes {0} [built]
[Rend]      [1] ./node_modules/css-loader/dist/runtime/cssWithMappingToString.js 2.22 KiB {0} [built]
[Rend]      [2] ./node_modules/css-loader/dist/runtime/api.js 1.57 KiB {0} [built]
[Rend]      [3] ./node_modules/css-loader/dist/cjs.js!./src/css/webfonts.css 7.5 KiB {0} [built]
[Rend]      [4] ./src/css/webfonts/Open_Sans-italic-300.woff 75 bytes {0} [built]
[Rend]     [14] ./src/images/loading.svg 62 bytes {0} [built]
[Rend]     [15] ./src/images/logo-dark@2x.png 67 bytes {0} [built]
[Rend]     [16] ./src/images/logo-white@2x.png 68 bytes {0} [built]
[Rend]     [17] ./node_modules/font-awesome/fonts/fontawesome-webfont.eot?v=4.7.0 73 bytes {0} [built]
[Rend]     [18] ./node_modules/font-awesome/fonts/fontawesome-webfont.eot 73 bytes {0} [built]
[Rend]     [19] ./node_modules/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 75 bytes {0} [built]
[Rend]     [20] ./node_modules/font-awesome/fonts/fontawesome-webfont.woff?v=4.7.0 74 bytes {0} [built]
[Rend]     [21] ./node_modules/font-awesome/fonts/fontawesome-webfont.ttf?v=4.7.0 73 bytes {0} [built]
[Rend]     [22] ./node_modules/font-awesome/fonts/fontawesome-webfont.svg?v=4.7.0 73 bytes {0} [built]
[Rend]     [23] ./node_modules/css-loader/dist/cjs.js!./node_modules/sass-loader/dist/cjs.js!./src/scss/styles.scss 369 KiB {0} [built]
[Rend]         + 9 hidden modules
[Rend] npm run build:renderer exited with code 0

> bitwarden@0.0.0 clean:dist /home/scott/.cache/yay/bitwarden/src/desktop-1.28.0
> rimraf ./dist/*

  • electron-builder  version=22.10.5 os=5.10.56-1-lts
  • loaded configuration  file=package.json ("build" field)
  • writing effective config  file=dist/builder-effective-config.yaml
  • installing production dependencies  platform=linux arch=x64 appDir=/home/scott/.cache/yay/bitwarden/src/desktop-1.28.0/build
  • packaging       platform=linux arch=x64 electron=11.4.12 appOutDir=dist/linux-unpacked
  • copying Electron  source=/usr/lib/electron11 destination=/home/scott/.cache/yay/bitwarden/src/desktop-1.28.0/dist/linux-unpacked
## After sign

   ╭─────────────────────────────────────────────────╮
   │                                                 │
   │       Update available 22.10.5 → 22.11.7        │
   │   Run yarn upgrade electron-builder to update   │
   │                                                 │
   ╰─────────────────────────────────────────────────╯

Deleted alias default - restore it with `nvm alias "default" "14.17.5"`
==> Entering fakeroot environment...
==> Starting package()...
==> Tidying install...
  -> Removing empty directories...
  -> Removing libtool files...
  -> Purging unwanted files...
  -> Removing static library files...
  -> Compressing man and info pages...
==> Checking for packaging issues...
==> Creating package "bitwarden"...
  -> Generating .PKGINFO file...
  -> Generating .BUILDINFO file...
  -> Generating .MTREE file...
  -> Compressing package...
==> Leaving fakeroot environment.
==> Finished making: bitwarden 1.28.0-1 (Fri 20 Aug 2021 06:41:42 PM CDT)
==> Cleaning up...
loading packages...
resolving dependencies...
looking for conflicting packages...

Package (1)  Old Version  New Version  Net Change

bitwarden    1.27.1-2     1.28.0-1       0.38 MiB

Total Installed Size:  25.20 MiB
Net Upgrade Size:       0.38 MiB

:: Proceed with installation? [Y/n] 
(1/1) checking keys in keyring                                                                                     [---------------------------------------------------------------------] 100%
(1/1) checking package integrity                                                                                   [---------------------------------------------------------------------] 100%
(1/1) loading package files                                                                                        [---------------------------------------------------------------------] 100%
(1/1) checking for file conflicts                                                                                  [---------------------------------------------------------------------] 100%
(1/1) checking available disk space                                                                                [---------------------------------------------------------------------] 100%
:: Processing package changes...
(1/1) upgrading bitwarden                                                                                          [---------------------------------------------------------------------] 100%
:: Running post-transaction hooks...
(1/3) Arming ConditionNeedsUpdate...
(2/3) Updating icon theme caches...
(3/3) Updating the desktop file MIME type cache...

You can just run yay and it will update both. There is no need to run pacman first and then run yay. When you run yay, it first updates the repo packages and then updates the aur packages.

AUR packages are flagged out-of-date to let the maintainer now there is an update available and they need to update the PKGBUILD. It doesn’t mean there is an update ready for you to download.

Those are all fairly normal for building an electron application.

As a side note, while I am, generally speaking, a huge advocate of getting packages from the AUR instead of other sources, I actually use the appimage of bitwarden that comes straight from them. I don’t want to take any risks with my password manager.

2 Likes

Yeah normally that’s what I’d do, I just wanted to take my time with each one this time in case something came up :stuck_out_tongue:

This is good to know now, thank you!

I just downloaded the .appimage from Bitwarden’s website to test out, made it executable, and when I opened it, I’m pretty sure it just ended up opening the AUR version of Bitwarden instead (which I still have installed at the moment). I could be mistaken of course, but I opened the .appimage the first time and all it wanted was my password, didn’t even show/ask for my email. I guess you can only have one version of Bitwarden installed or something. But you’re right, it’s better safe to manage this with an .appimage from their official site.

I don’t suppose they are also the maintainers for the flatpak? I’d assume most likely that is not the case.

In any case though, thank you very much for your insightful help and feedback for my questions, it’s definitely helping me get a better understanding of the Arch ecosystem more and more each day that I use this lovely distro called EndeavourOS. Thanks again mate!

1 Like

It is also possible they are using the same settings from your home directory and you are running the appimage. The appimage shouldn’t conflict with another version.

I believe the flatpak is also official but I don’t use it so I wouldn’t guarantee it.

1 Like

You think Bitwarden will ever end up in the official Arch repos or be relegated to the AUR for the rest of its days I wonder?

I used the AUR version in the past, but I had an issue about 4 or 5 months ago after a Plasma main update. Since then I also run the appimage of Bitwarden and I don’t have any issue.

3 Likes

One of the good things about Bitwarden’s appimage is that it auto-updates.

3 Likes

I am wondering if that is the correct perception of security.

The AUR package pulls the official source code from https://github.com/bitwarden/desktop/archive and https://github.com/bitwarden/jslib/archive. This is the source code all the security experts are auditing. This is the source code which is secure by all practical means.

The appimage on the other hand is closed source. Meaning: You do not know which source code they used to build it. They could easily add a patch to send your password somewhere else and you will not know.

May be I am wrong. But why do you consider the appimage more secure or less risky?

1 Like

Why would I need a desktop applet?
I have BW in my browser only…

3 Likes

Yup makes sense. The browser is where most of the passwords are input

2 Likes

I don’t think you are wrong. Your points are very valid in my opinion.

Ultimately, it comes down to weighing my risks. My theory is if I don’t trust the software bitwarden makes, I shouldn’t be using it so introducing a 3rd party into the trust chain adds avoidable risk.

Yours seems to be that if I audit the PKGBUILD myself, I limit the amount of trust I delegate to a 3rd party.

Ultimately, I think that both of those things are true so it comes down to which risk you care about more and which option is more convenient.

If you don’t need it, don’t install it. Why bring in a giant electron app in that only runs some javascipt?

I used to use it all the time because it suited my workflow better in certain situations. However, I haven’t used it in months so I should probably remove it. That would be the best way to solve the problem. :cowboy_hat_face:

2 Likes

I dont understand your point?

The source from github has been audited. It passed all security audits. If you build bitwarden from that source you get maximum security. It passed the audits after all.

If you use the appimage you do not know anything about the source. It could contain a secret backdoor. This backdoor would not exist in the github source.

So from my point of view, the only reason to use the appimage is convenience. But from a security point of view it is inferior to the AUR package.

1 Like

My understanding is that the audits are done annually, not every time code is released. So you are still trusting bitwarden and their processes.

To be clear, I agree with what you are saying, I just weigh the risks differently than you.

2 Likes

Please correct me if I am wrong, but using a cloud-based password management wouldn’t imply some sort of putting the trust in the service provider no matter which app you use, built by yourself or otherwise. I mean, I use Bitwarden on Android as well.

2 Likes

Apologies for butting in as I’m new.

The appimage is straight from Bitwarden website https://bitwarden.com/download/

However it is only available in https://aur.archlinux.org/ user repo but not yet into more trusted “official” https://archlinux.org/

Does mean anything downloaded from “official” is 100% trusted but “user” repo is up to end user to check it is safe themselves, not just based on votes?

Just want to be sure for my own reference.

1 Like

Warning: AUR packages are user produced content. These PKGBUILDs are completely unofficial and have not been thoroughly vetted. Any use of the provided files is at your own risk.
https://wiki.archlinux.org/title/AUR

To my understanding the votes could be indicative of popularity of a package, but at the end of the day, it comes down to the users to verify the PKGBUILDs by themselves.

Voting for packages

One of the easiest activities for all Arch users is to browse the AUR and vote for their favourite packages using the online interface. All packages are eligible for adoption by a TU for inclusion in the community repository, and the vote count is on
https://wiki.archlinux.org/title/AUR#Voting_for_packages

1 Like

It means neither of those things really.

It changes who you decide to trust. When you install software from the repos, you are trusting the packager of that software who is an Arch Trusted User or a member of the EOS team. When you install software from the AUR, you are either trusting the maintainer, or yourself, depending on if you verify the PKGBUILD yourself or not. The fact that you can read the PKGBUILD is what makes the AUR so great.

As for votes, all that tells you is how popular the package is. It tells you nothing about the package itself. People vote for AUR packages to indicate that they would like them included in the official repos. It does serve as a general indicator for how widely used the package is.

2 Likes

Thanks all.

The bitwarden application is encrypting any data on the client before it is uploaded to their server. The github source code was audited in that regard. Nothing unencrypted leaves your client. Your master password is not leaving your client.

Even if somebody is compromising the bitwarden servers your password container would still be save because it is encrypted. And the encryption is strong (proven by software audit). There is no practical way to decrypt your password container without knowing your master password.

You need to trust your master password! And you need to trust the bitwarden source code you are using.

2 Likes

But then your concern is that the appimage (and or the apk file) might in some way be “potentially” lacking in that regard since the code is not auditable?

1 Like