dehelper-bin
LOW
maintainer char1es4k
0 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package repackages an official .deb from the vendor's CDN (static.frdic.com) for Arch Linux; the source is a prebuilt binary, but from the project's own infrastructure, not a swappable host, and no malicious behavior is present.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package repackages an official .deb from the vendor's CDN (static.frdic.com) for Arch Linux; the source is a prebuilt binary, but from the project's own infrastructure, not a swappable host, and no malicious behavior is present.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:53
source=("dehelper-${pkgver}.deb::https://static.frdic.com/pkg/dehelper.deb?v=2026-04-09")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: charles940316 <charles940316@gmail.com>
2
#
3
# Repackages the official EUSOFT "德语助手 / Eudic German Helper" (dehelper) .deb
4
# for Arch Linux. The upstream binary is a self-contained Qt5 WebEngine bundle:
5
# it ships its own Qt5, GTK3, GStreamer, etc. under /usr/share/eusoft-dehelper,
6
# so only the base system libraries below need to come from Arch.
7
8
pkgname=dehelper-bin
9
pkgver=13.5.2
10
pkgrel=1
11
pkgdesc="德语助手 (Eudic German Helper) by EUSOFT — self-contained repackage of the official .deb (bundles its own Qt, no compilation)"
12
arch=('x86_64')
13
url="https://www.eudic.net"
14
license=('custom:Proprietary')
15
provides=('dehelper' 'eusoft-dehelper')
16
conflicts=('dehelper' 'eusoft-dehelper')
17
18
# Real runtime dependencies, derived from the ELF NEEDED entries of the main
19
# binary and every bundled .so (after subtracting what the bundle already ships).
20
depends=(
21
'glibc' # libc/libm/libdl/libpthread/libresolv/librt/libmvec/ld-linux
22
'gcc-libs' # libstdc++ libgcc_s
23
'nss' # libnss3 libnssutil3 (Qt WebEngine / Chromium)
24
'alsa-lib' # libasound
25
'libdrm' # libdrm
26
'libglvnd' # libGL libEGL
27
'mesa' # libgbm
28
'expat' # libexpat
29
'fontconfig' # libfontconfig
30
'freetype2' # libfreetype
31
'harfbuzz' # libharfbuzz
32
'libthai' # libthai
33
'gmp' # libgmp
34
'libgpg-error' # libgpg-error
35
'p11-kit' # libp11-kit
36
'e2fsprogs' # libcom_err
37
'util-linux-libs' # libuuid
38
'libx11' # libX11
39
'libxcb' # libxcb libxcb-dri3
40
'zlib' # libz
41
)
42
43
optdepends=(
44
'xdg-utils: open external links in the system browser'
45
'jack2: JACK audio output via the bundled GStreamer plugin'
46
'pulseaudio: PulseAudio audio output'
47
'libsecret: store credentials in the system keyring'
48
'libnotify: desktop notifications'
49
)
50
51
# Official .deb from EUSOFT's CDN. The query string pins the upstream build
52
# date; bump it (and the sha256 below) together with pkgver on each update.
53
source=("dehelper-${pkgver}.deb::https://static.frdic.com/pkg/dehelper.deb?v=2026-04-09")
54
noextract=("dehelper-${pkgver}.deb")
55
sha256sums=('fc47e56b3907522a8d3dbd906a4e4117991e0aed772c08547b0214c8b08fcccc')
56
57
package() {
58
cd "$srcdir"
59
60
# A .deb is an 'ar' archive containing data.tar.xz; bsdtar (libarchive,
61
# pulled in by makepkg) can read the ar wrapper directly.
62
bsdtar -xOf "dehelper-${pkgver}.deb" data.tar.xz | bsdtar -xpf - -C "$pkgdir"
63
64
# The shipped /usr/bin is empty — add a launcher symlink so the app can be
65
# started from a terminal as `dehelper`.
66
install -d "$pkgdir/usr/bin"
67
ln -sf /usr/share/eusoft-dehelper/AppRun "$pkgdir/usr/bin/dehelper"
68
69
# Upstream's .desktop has only a Chinese Name and no keywords, so KRunner /
70
# app launchers can't find it by its Latin name. Show "dehelper" by default
71
# (keeping the Chinese name under zh_CN) and add GenericName + Keywords so
72
# "dehelper", "eudic", "german", etc. all match.
73
local desktop="$pkgdir/usr/share/applications/eusoft-dehelper.desktop"
74
sed -i -e '/^Comment=/d' -e 's/^Name=.*/Name=dehelper/' "$desktop"
75
cat >> "$desktop" <<'EOF'
76
Name[zh_CN]=德语助手
77
GenericName=German Dictionary
78
GenericName[zh_CN]=德语词典
79
Comment=German Helper (dehelper) by EUSOFT
80
Comment[zh_CN]=德语助手
81
Keywords=dehelper;eusoft;german;deutsch;dictionary;dict;词典;德语;德语助手;
82
EOF
83
}
84
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |