38c3-styleguide

maintainer dreieck · 5 votes · base 38c3-styles · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads a zip file and an HTML page from the official event website (events.ccc.de), which is a plausible project-owned host; the SKIP'd checksum for the HTML is non-ideal but the content is only converted to text/markdown and not executed, posing minimal risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a zip file and an HTML page from the official event website (events.ccc.de), which is a plausible project-owned host; the SKIP'd checksum for the HTML is non-ideal but the content is only converted to text/markdown and not executed, posing minimal risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:38 "https://events.ccc.de/congress/2024/infos/styleguide/38c3-styleguide-full-v${pkgver}.zip"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: dreieck
    
      2
    
      3_pkgbase='38c3-styles'
    
      4pkgbase="${_pkgbase}"
    
      5pkgname=(
    
      6  "otf-pilowlava"
    
      7  "woff-pilowlava"
    
      8  "woff2-pilowlava"
    
      9  "otf-space-grotesk"
    
      10  "woff-space-grotesk"
    
      11  "woff2-space-grotesk"
    
      12  "pilowlava-font-common"
    
      13  "ttf-space-mono"
    
      14  "otf-uncut-sans"
    
      15  "ttf-uncut-sans"
    
      16  "woff-uncut-sans"
    
      17  "woff2-uncut-sans"
    
      18  "38c3-styleguide"
    
      19  "38c3-style-assets"
    
      20  "38c3-styles-commoninfo"
    
      21)
    
      22_spacegroteskver="1.1.4"
    
      23pkgver=2
    
      24pkgrel=2
    
      25pkgdesc='Fonts and styles for the 38th Chaos Communication Congress.'
    
      26arch=('any')
    
      27url='https://events.ccc.de/congress/2024/infos/styleguide.html'
    
      28license=('CC0-1.0' 'OFL-1.1')
    
      29depends=()
    
      30makedepends=(
    
      31  'fontforge'
    
      32  'html2markdown'
    
      33  # 'html2md'
    
      34  'python-html2text'
    
      35)
    
      36optdepends=()
    
      37source=(
    
      38  "https://events.ccc.de/congress/2024/infos/styleguide/38c3-styleguide-full-v${pkgver}.zip"
    
      39  "38c3-styles-website.html::${url}"
    
      40)
    
      41sha256sums=(
    
      42  '9ae65abcfc85c97a95bf64e70e9f5a0aba7948eea1d56a5a99a5feed727f5216'
    
      43  'SKIP'
    
      44)
    
      45
    
      46prepare() {
    
      47  cd "${srcdir}"
    
      48
    
      49  printf '%s\n' "  > Generating 'website.url' information file ..."
    
      50  printf '%s\n' "${url}" > "${srcdir}/website.url"
    
      51
    
      52  cp "38c3-styles-website.html" "website.html"
    
      53}
    
      54
    
      55build() {
    
      56  cd "${srcdir}"
    
      57
    
      58  printf '%s\n' "  > Converting 'website.html' to text/plain format ..."
    
      59  html2text --no-wrap-links --body-width 0 --mark-code --reference-links --links-after-para --unicode-snob website.html > website.txt
    
      60  printf '%s\n' "  > Converting 'website.html' to Markdown format ..."
    
      61  html2markdown --input website.html --output website.md --output-overwrite
    
      62  # html2md -i website.html > website.md
    
      63}
    
      64
    
      65package_otf-pilowlava() {
    
      66  pkgdesc='Pilowlava OTF font.'
    
      67  license=("OFL-1.1")
    
      68  depends=("pilowlava-font-common")
    
      69  optdepends=()
    
      70
    
      71  cd "${srcdir}/fonts/pilowlava"
    
      72  install -Dvm644 -t "${pkgdir}/usr/share/fonts/OTF"/  Fonts/*.otf
    
      73
    
      74  install -dvm755 "${pkgdir}/usr/share/licenses/${pkgname}"
    
      75  ln -svr "${pkgdir}/usr/share/licenses/pilowlava-font"/COPYRIGHT.md "${pkgdir}/usr/share/licenses/${pkgname}"/COPYRIGHT.md
    
      76  ln -svr "${pkgdir}/usr/share/licenses/pilowlava-font"/License.txt  "${pkgdir}/usr/share/licenses/${pkgname}"/License.txt
    
      77}
    
      78
    
      79package_woff-pilowlava() {
    
      80  pkgdesc='Pilowlava woff web font.'
    
      81  license=("OFL-1.1")
    
      82  depends=("pilowlava-font-common")
    
      83  optdepends=()
    
      84
    
      85  cd "${srcdir}/fonts/pilowlava"
    
      86  install -Dvm644 -t "${pkgdir}/usr/share/fonts/WOFF"/  Fonts/webfonts/*.woff
    
      87
    
      88  install -dvm755 "${pkgdir}/usr/share/licenses/${pkgname}"
    
      89  ln -svr "${pkgdir}/usr/share/licenses/pilowlava-font"/COPYRIGHT.md "${pkgdir}/usr/share/licenses/${pkgname}"/COPYRIGHT.md
    
      90  ln -svr "${pkgdir}/usr/share/licenses/pilowlava-font"/License.txt  "${pkgdir}/usr/share/licenses/${pkgname}"/License.txt
    
      91}
    
      92
    
      93package_woff2-pilowlava() {
    
      94  pkgdesc='Pilowlava woff2 web font.'
    
      95  license=("OFL-1.1")
    
      96  depends=("pilowlava-font-common")
    
      97  optdepends=()
    
      98
    
      99  cd "${srcdir}/fonts/pilowlava"
    
      100  install -Dvm644 -t "${pkgdir}/usr/share/fonts/WOFF2"/  Fonts/webfonts/*.woff2
    
      101
    
      102  install -dvm755 "${pkgdir}/usr/share/licenses/${pkgname}"
    
      103  ln -svr "${pkgdir}/usr/share/licenses/pilowlava-font"/COPYRIGHT.md "${pkgdir}/usr/share/licenses/${pkgname}"/COPYRIGHT.md
    
      104  ln -svr "${pkgdir}/usr/share/licenses/pilowlava-font"/License.txt  "${pkgdir}/usr/share/licenses/${pkgname}"/License.txt
    
      105}
    
      106
    
      107package_pilowlava-font-common() {
    
      108  pkgdesc='General documentation and license for Pilowlava font.'
    
      109  license=("OFL-1.1")
    
      110  optdepends=(
    
      111    "otf-pilowlava: For Pilowlava OTF font."
    
      112    "woff-pilowlava: For Pilowlava WOFF web font."
    
      113    "woff2-pilowlava: For Pilowlava WOFF2 web font."
    
      114  )
    
      115
    
      116  cd "${srcdir}/fonts/pilowlava"
    
      117  install -Dvm644 -t "${pkgdir}/usr/share/doc/pilowlava-font"/       FONTLOG.md README.md TRADEMARKS.md
    
      118  cp -rv documentation "${pkgdir}/usr/share/doc/pilowlava-font"/
    
      119  install -Dvm644 -t "${pkgdir}/usr/share/licenses/pilowlava-font"/  COPYRIGHT.md License.txt
    
      120}
    
      121
    
      122package_otf-space-grotesk() {
    
      123  pkgdesc='Space Grotesk OTF font.'
    
      124  license=("OFL-1.1")
    
      125  #pkgver="${_spacegroteskver}"
    
      126  optdepends=()
    
      127
    
      128  cd "${srcdir}/fonts/space-grotesk-${_spacegroteskver}"
    
      129  install -Dvm644 -t "${pkgdir}/usr/share/fonts/OTF"/  otf/*.otf
    
      130
    
      131  install -Dvm644 -t "${pkgdir}/usr/share/licenses/${pkgname}"/  OFL.txt
    
      132}
    
      133package_woff-space-grotesk() {
    
      134  pkgdesc='Space Grotesk woff web font.'
    
      135  license=("OFL-1.1")
    
      136  #pkgver="${_spacegroteskver}"
    
      137  optdepends=()
    
      138
    
      139  cd "${srcdir}/fonts/space-grotesk-${_spacegroteskver}"
    
      140  install -Dvm644 -t "${pkgdir}/usr/share/fonts/WOFF"/  webfont/*.woff
    
      141
    
      142  install -Dvm644 -t "${pkgdir}/usr/share/licenses/${pkgname}"/  OFL.txt
    
      143}
    
      144package_woff2-space-grotesk() {
    
      145  pkgdesc='Space Grotesk woff2 web font.'
    
      146  license=("OFL-1.1")
    
      147  #pkgver="${_spacegroteskver}"
    
      148  optdepends=()
    
      149
    
      150  cd "${srcdir}/fonts/space-grotesk-${_spacegroteskver}"
    
      151  install -Dvm644 -t "${pkgdir}/usr/share/fonts/WOFF2"/  webfont/*.woff2
    
      152
    
      153  install -Dvm644 -t "${pkgdir}/usr/share/licenses/${pkgname}"/  OFL.txt
    
      154}
    
      155package_ttf-space-mono() {
    
      156  pkgdesc='Space Mono TTF font.'
    
      157  license=("OFL-1.1")
    
      158  optdepends=()
    
      159
    
      160  cd "${srcdir}/fonts/space-mono"
    
      161  install -Dvm644 -t "${pkgdir}/usr/share/fonts/TTF"/  *.ttf
    
      162
    
      163  install -Dvm644 -t "${pkgdir}/usr/share/licenses/${pkgname}"/  OFL.txt
    
      164}
    
      165package_otf-uncut-sans() {
    
      166  pkgdesc='Uncut Sans OTF font.'
    
      167  license=("OFL-1.1")
    
      168  optdepends=()
    
      169
    
      170  cd "${srcdir}/fonts/uncut-sans"
    
      171  install -Dvm644 -t "${pkgdir}/usr/share/fonts/OTF"/  Static/*.otf
    
      172
    
      173  install -Dvm644 -t "${pkgdir}/usr/share/licenses/${pkgname}"/  LICENSE.txt
    
      174}
    
      175package_ttf-uncut-sans() {
    
      176  pkgdesc='Uncut Sans TTF font.'
    
      177  license=("OFL-1.1")
    
      178  optdepends=()
    
      179
    
      180  cd "${srcdir}/fonts/uncut-sans"
    
      181  install -Dvm644 -t "${pkgdir}/usr/share/fonts/TTF"/  Variable/*.ttf
    
      182
    
      183  install -Dvm644 -t "${pkgdir}/usr/share/licenses/${pkgname}"/  LICENSE.txt
    
      184}
    
      185package_woff-uncut-sans() {
    
      186  pkgdesc='Uncut Sans woff web font.'
    
      187  license=("OFL-1.1")
    
      188  optdepends=()
    
      189
    
      190  cd "${srcdir}/fonts/uncut-sans"
    
      191  install -Dvm644 -t "${pkgdir}/usr/share/fonts/WOFF"/  Webfonts/*.woff
    
      192
    
      193  install -Dvm644 -t "${pkgdir}/usr/share/licenses/${pkgname}"/  LICENSE.txt
    
      194}
    
      195package_woff2-uncut-sans() {
    
      196  pkgdesc='Uncut Sans woff2 web font.'
    
      197  license=("OFL-1.1")
    
      198  optdepends=()
    
      199
    
      200  cd "${srcdir}/fonts/uncut-sans"
    
      201  install -Dvm644 -t "${pkgdir}/usr/share/fonts/WOFF2"/  Webfonts/*.woff2
    
      202
    
      203  install -Dvm644 -t "${pkgdir}/usr/share/licenses/${pkgname}"/  LICENSE.txt
    
      204}
    
      205
    
      206package_38c3-styleguide () {
    
      207  pkgdesc='Styleguide for the 38th Chaos Communication Congress.'
    
      208  license=("CC0-1.0")
    
      209  optdepends=(
    
      210    "38c3-styles-commoninfo: For general information files ('Readme'/ website)."
    
      211    "38c3-style-assets: For the assets except of fonts."
    
      212    "woff2-uncut-sans: For 'Uncut Sans' woff2 web font."
    
      213    "woff-uncut-sans: For 'Uncut Sans' woff web font."
    
      214    "otf-uncut-sans: For 'Uncut Sans' OTF font."
    
      215    "ttf-uncut-sans: For 'Uncut Sans' TTF font."
    
      216    "otf-pilowlava: For 'Pilowlava' OTF font."
    
      217    "ttf-space-mono: For 'Space Mono' TTF font."
    
      218    "woff-pilowlava: For 'Pilowlava' woff web font."
    
      219    "woff2-pilowlava: For 'Pilowlava' woff2 web font."
    
      220    "otf-space-grotesk: For 'Space Grotesk' OTF font."
    
      221    "woff-space-grotesk: For 'Space Grotesk' woff web font."
    
      222    "woff2-space-grotesk: For 'Space Grotesk' woff2 web font."
    
      223  )
    
      224
    
      225  cd "${srcdir}"
    
      226
    
      227  install -Dvm644 -t "${pkgdir}/usr/share/doc/${_pkgbase}"/  "38c3-styleguide-v${pkgver}.pdf"
    
      228}
    
      229
    
      230package_38c3-styles-commoninfo() {
    
      231  pkgdesc='General information for the styles for the 38th Chaos Communication Congress.'
    
      232  license=("CC0-1.0")
    
      233  optdepends=(
    
      234    "38c3-style-assets: For the assets except of fonts."
    
      235    "woff2-uncut-sans: For 'Uncut Sans' woff2 web font."
    
      236    "woff-uncut-sans: For 'Uncut Sans' woff web font."
    
      237    "otf-uncut-sans: For 'Uncut Sans' OTF font."
    
      238    "ttf-uncut-sans: For 'Uncut Sans' TTF font."
    
      239    "otf-pilowlava: For 'Pilowlava' OTF font."
    
      240    "38c3-styleguide: For the styleguide."
    
      241    "ttf-space-mono: For 'Space Mono' TTF font."
    
      242    "woff-pilowlava: For 'Pilowlava' woff web font."
    
      243    "woff2-pilowlava: For 'Pilowlava' woff2 web font."
    
      244    "otf-space-grotesk: For 'Space Grotesk' OTF font."
    
      245    "woff-space-grotesk: For 'Space Grotesk' woff web font."
    
      246    "woff2-space-grotesk: For 'Space Grotesk' woff2 web font."
    
      247  )
    
      248
    
      249  cd "${srcdir}"
    
      250
    
      251  install -Dvm644 -t "${pkgdir}/usr/share/doc/${_pkgbase}"/  website.md website.html website.url
    
      252}
    
      253
    
      254package_38c3-style-assets() {
    
      255  pkgdesc='Assets (graphics, logos, ...) except fonts for the style of the 38th chaos communication congress.'
    
      256  license=('CC0-1.0')
    
      257  optdepends=(
    
      258    "38c3-styleguide: For the styleguide."
    
      259    "38c3-styles-commoninfo: For general information files ('Readme'/ website)."
    
      260  )
    
      261
    
      262  cd "${srcdir}"
    
      263  install -dvm755 "${pkgdir}/usr/share/doc"/${_pkgbase}/assets
    
      264  cp -rv assets blender luts  "${pkgdir}/usr/share/doc"/${_pkgbase}/assets/
    
      265}

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2