dehelper-bin

maintainer char1es4k · 0 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package repackages an official .deb from the vendor's CDN (static.frdic.com) for Arch Linux; the source is a prebuilt binary, but from the project's own infrastructure, not a swappable host, and no malicious behavior is present.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package repackages an official .deb from the vendor's CDN (static.frdic.com) for Arch Linux; the source is a prebuilt binary, but from the project's own infrastructure, not a swappable host, and no malicious behavior is present.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:53 source=("dehelper-${pkgver}.deb::https://static.frdic.com/pkg/dehelper.deb?v=2026-04-09")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: charles940316 <charles940316@gmail.com>
2#
3# Repackages the official EUSOFT "德语助手 / Eudic German Helper" (dehelper) .deb
4# for Arch Linux. The upstream binary is a self-contained Qt5 WebEngine bundle:
5# it ships its own Qt5, GTK3, GStreamer, etc. under /usr/share/eusoft-dehelper,
6# so only the base system libraries below need to come from Arch.
7
8pkgname=dehelper-bin
9pkgver=13.5.2
10pkgrel=1
11pkgdesc="德语助手 (Eudic German Helper) by EUSOFT — self-contained repackage of the official .deb (bundles its own Qt, no compilation)"
12arch=('x86_64')
13url="https://www.eudic.net"
14license=('custom:Proprietary')
15provides=('dehelper' 'eusoft-dehelper')
16conflicts=('dehelper' 'eusoft-dehelper')
17
18# Real runtime dependencies, derived from the ELF NEEDED entries of the main
19# binary and every bundled .so (after subtracting what the bundle already ships).
20depends=(
21 'glibc' # libc/libm/libdl/libpthread/libresolv/librt/libmvec/ld-linux
22 'gcc-libs' # libstdc++ libgcc_s
23 'nss' # libnss3 libnssutil3 (Qt WebEngine / Chromium)
24 'alsa-lib' # libasound
25 'libdrm' # libdrm
26 'libglvnd' # libGL libEGL
27 'mesa' # libgbm
28 'expat' # libexpat
29 'fontconfig' # libfontconfig
30 'freetype2' # libfreetype
31 'harfbuzz' # libharfbuzz
32 'libthai' # libthai
33 'gmp' # libgmp
34 'libgpg-error' # libgpg-error
35 'p11-kit' # libp11-kit
36 'e2fsprogs' # libcom_err
37 'util-linux-libs' # libuuid
38 'libx11' # libX11
39 'libxcb' # libxcb libxcb-dri3
40 'zlib' # libz
41)
42
43optdepends=(
44 'xdg-utils: open external links in the system browser'
45 'jack2: JACK audio output via the bundled GStreamer plugin'
46 'pulseaudio: PulseAudio audio output'
47 'libsecret: store credentials in the system keyring'
48 'libnotify: desktop notifications'
49)
50
51# Official .deb from EUSOFT's CDN. The query string pins the upstream build
52# date; bump it (and the sha256 below) together with pkgver on each update.
53source=("dehelper-${pkgver}.deb::https://static.frdic.com/pkg/dehelper.deb?v=2026-04-09")
54noextract=("dehelper-${pkgver}.deb")
55sha256sums=('fc47e56b3907522a8d3dbd906a4e4117991e0aed772c08547b0214c8b08fcccc')
56
57package() {
58 cd "$srcdir"
59
60 # A .deb is an 'ar' archive containing data.tar.xz; bsdtar (libarchive,
61 # pulled in by makepkg) can read the ar wrapper directly.
62 bsdtar -xOf "dehelper-${pkgver}.deb" data.tar.xz | bsdtar -xpf - -C "$pkgdir"
63
64 # The shipped /usr/bin is empty — add a launcher symlink so the app can be
65 # started from a terminal as `dehelper`.
66 install -d "$pkgdir/usr/bin"
67 ln -sf /usr/share/eusoft-dehelper/AppRun "$pkgdir/usr/bin/dehelper"
68
69 # Upstream's .desktop has only a Chinese Name and no keywords, so KRunner /
70 # app launchers can't find it by its Latin name. Show "dehelper" by default
71 # (keeping the Chinese name under zh_CN) and add GenericName + Keywords so
72 # "dehelper", "eudic", "german", etc. all match.
73 local desktop="$pkgdir/usr/share/applications/eusoft-dehelper.desktop"
74 sed -i -e '/^Comment=/d' -e 's/^Name=.*/Name=dehelper/' "$desktop"
75 cat >> "$desktop" <<'EOF'
76Name[zh_CN]=德语助手
77GenericName=German Dictionary
78GenericName[zh_CN]=德语词典
79Comment=German Helper (dehelper) by EUSOFT
80Comment[zh_CN]=德语助手
81Keywords=dehelper;eusoft;german;deutsch;dictionary;dict;词典;德语;德语助手;
82EOF
83}
84

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion