apple-sf-fonts
MEDIUM
maintainer tux_peng
0 votes
scanned 2026-10-29 01:51:16.702666
Why flagged
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
Triggered rules
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:11
"SF-Pro.dmg::https://devimages-cdn.apple.com/design/resources/download/SF-Pro.dmg"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Josh Dye <jpenguin@duck.com>
2
pkgname=apple-sf-fonts
3
pkgver=2026.01.20
4
pkgrel=1
5
pkgdesc="Apple San Francisco, SF Compact, SF Mono, NY, and regional fonts"
6
arch=('any')
7
url="https://developer.apple.com/fonts/"
8
license=('custom')
9
depends=('p7zip' 'cpio')
10
source=(
11
"SF-Pro.dmg::https://devimages-cdn.apple.com/design/resources/download/SF-Pro.dmg"
12
"SF-Compact.dmg::https://devimages-cdn.apple.com/design/resources/download/SF-Compact.dmg"
13
"SF-Mono.dmg::https://devimages-cdn.apple.com/design/resources/download/SF-Mono.dmg"
14
"NY.dmg::https://devimages-cdn.apple.com/design/resources/download/NY.dmg"
15
"SF-Arabic.dmg::https://devimages-cdn.apple.com/design/resources/download/SF-Arabic.dmg"
16
"SF-Armenian.dmg::https://devimages-cdn.apple.com/design/resources/download/SF-Armenian.dmg"
17
"SF-Georgian.dmg::https://devimages-cdn.apple.com/design/resources/download/SF-Georgian.dmg"
18
"SF-Hebrew.dmg::https://devimages-cdn.apple.com/design/resources/download/SF-Hebrew.dmg"
19
)
20
21
# No checksums for brevity; add sha256sums in a real PKGBUILD
22
sha256sums=('SKIP' 'SKIP' 'SKIP' 'SKIP' 'SKIP' 'SKIP' 'SKIP' 'SKIP')
23
24
prepare() {
25
# Nothing to prepare
26
true
27
}
28
29
build() {
30
# Helper to extract a font package from a dmg
31
extract_font() {
32
local dmg=$1
33
local pkg_dir=$2
34
local pkg_name=$3
35
local payload_dir=$4
36
37
# Extract the .pkg from the dmg
38
7z e "$dmg" "$pkg_dir/$pkg_name.pkg"
39
40
# Extract the Payload cpio archive from the .pkg
41
7z e "$pkg_name.pkg" "$payload_dir/Payload"
42
43
# Extract the actual font files
44
7z x "./Payload"
45
cpio -idv < "./Payload~"
46
47
# Clean up temporary files
48
rm -f ./Payload* ./Pay* "$pkg_name.pkg"
49
}
50
51
# SF Pro
52
extract_font "SF-Pro.dmg" "SFProFonts" "SF Pro Fonts" "SFProFonts.pkg"
53
54
# SF Compact
55
extract_font "SF-Compact.dmg" "SFCompactFonts" "SF Compact Fonts" "SFCompactFonts.pkg"
56
57
# SF Mono
58
extract_font "SF-Mono.dmg" "SFMonoFonts" "SF Mono Fonts" "SFMonoFonts.pkg"
59
60
# NY
61
extract_font "NY.dmg" "NYFonts" "NY Fonts" "NYFonts.pkg"
62
63
# Regional fonts
64
extract_font "SF-Arabic.dmg" "SFArabicFonts" "SF Arabic Fonts" "SFArabicFonts.pkg"
65
extract_font "SF-Armenian.dmg" "SFArmenianFonts" "SF Armenian Fonts" "SFArmenianFonts.pkg"
66
extract_font "SF-Georgian.dmg" "SFGeorgianFonts" "SF Georgian Fonts" "SFGeorgianFonts.pkg"
67
extract_font "SF-Hebrew.dmg" "SFHebrewFonts" "SF Hebrew Fonts" "SFHebrewFonts.pkg"
68
}
69
70
package() {
71
# Install all extracted .ttf/.otf files into the package
72
mkdir -p "$pkgdir/usr/share/fonts/AppleSF"
73
install -Dm644 Library/Fonts/*.ttf Library/Fonts/*.otf "$pkgdir/usr/share/fonts/AppleSF/"
74
75
# Optional: create a fontconfig cache at install time
76
# (pacman will run fc-cache automatically)
77
}
78
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-29 01:51:16 | Medium | 1 |
| 2026-06-19 23:51:18 | Clean | 2 |
| 2026-06-19 22:34:54 | Medium | 1 |