alibabasans-puhuiti3-fontconfig

MEDIUM
maintainer zxp19821005 0 votes base alibabasans-puhuiti3-fonts scanned 2026-10-27 03:46:34.713263
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:16 "${pkgbase}-${pkgver}.zip::https://fonts.alibabadesign.com/${_fontname}.zip"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: zxp19821005 <zxp19821005 at 163 dot com>
2# Co-Maintainer: taotieren <admin@taotieren.com>
3# PKGBUILD inspiration from fira-code
4
5pkgbase=alibabasans-puhuiti3-fonts
6pkgname=({eot,otf,ttf,woff,woff2}-"${pkgbase}" "${pkgbase%-fonts}-fontconfig")
7_fontname=AlibabaPuHuiTi-3
8pkgver=3.0
9pkgrel=4
10pkgdesc="A typeface for creating alibaba sans puhuiti3 in text.阿里巴巴普惠体简体中文(3.0),7字重"
11arch=('any')
12url='https://www.alibabafonts.com/#/font'
13license=('LicenseRef-custom')
14makedepends=(fontconfig)
15source=(
16 "${pkgbase}-${pkgver}.zip::https://fonts.alibabadesign.com/${_fontname}.zip"
17 "license.txt"
18)
19sha256sums=('f25f730b6a7661bcd5b9764dc98f05d3ac25ee771977cf04b31ed5fba9f496a7'
20 'd8a5691d7a5a7542a379ab9a568a16ca5cd5506e758fb46789bb79b42cb5635a')
21function _package {
22 depends=("${pkgbase%-fonts}-fontconfig")
23 local _pkgname=$1
24 local ext="${_pkgname%%-*}"
25 for num in 35-Thin 45-Light 55-Regular 55-RegularL3 65-Medium 75-SemiBold 85-Bold 95-ExtraBold 105-Heavy 115-Black; do
26 cd "${srcdir}/${_fontname}/${_fontname}-${num}"
27 local fonts=("${_fontname}-${num}.${ext}")
28 local installdir="${ext^^}"
29 # Prepare destination directory
30 install -dm755 "${pkgdir}/usr/share/fonts/${installdir}"
31 # Install fonts
32 local font
33 for font in "${fonts[@]}"; do
34 install -m644 "${font}" "${pkgdir}/usr/share/fonts/${installdir}"
35 install -Dm644 "${srcdir}/license.txt" "${pkgdir}/usr/share/licenses/${ext}-${pkgbase}/LICENSE"
36 done
37 done
38}
39_pkgname=({eot,otf,ttf,woff,woff2}-"${pkgbase}")
40for _pkgname in "${_pkgname[@]}"; do
41 eval "function package_${_pkgname}() { _package ${_pkgname}; }"
42done
43
44package_alibabasans-puhuiti3-fontconfig() {
45 pkgdesc="${pkgdesc} - Fontconfig configuration"
46 depends=('fontconfig')
47 install -Dm755 /dev/stdin "${pkgdir}/usr/share/fontconfig/conf.default/75-${pkgbase%-fonts}.conf" <<EOF
48<?xml version="1.0" encoding="UTF-8"?>
49<!DOCTYPE fontconfig SYSTEM "../fonts.dtd">
50<fontconfig>
51 <alias>
52 <family>Alibaba Sans</family>
53 <prefer><family>Alibaba PuHuiTi 3.0</family></prefer>
54 </alias>
55</fontconfig>
56EOF
57 install -dm755 "${pkgdir}/usr/share/fontconfig/conf.avail"
58 ln -nsf "/usr/share/fontconfig/conf.default/75-${pkgbase%-fonts}.conf" "${pkgdir}/usr/share/fontconfig/conf.avail/75-${pkgbase%-fonts}.conf"
59 install -Dm644 "${srcdir}/license.txt" "${pkgdir}/usr/share/licenses/${pkgbase%-fonts}-fontconfig/LICENSE"
60}
61

Scan history

Scanned at (UTC)SeverityRules
2026-10-27 03:46:34 Medium 1
2026-06-20 00:18:46 Medium 1
2026-06-19 23:51:18 Clean 2
2026-06-19 19:07:35 Low 2
2026-06-18 16:11:54 Medium 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion