eot-alibabasans-hk-fonts

MEDIUM

maintainer zxp19821005 0 votes base alibabasans-hk-fonts scanned 2026-11-03 00:04:01.898975

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:15 "${pkgbase}-${pkgver}.zip::https://fonts.alibabadesign.com/${_fontname}.zip"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: zxp19821005 <zxp19821005 at 163 dot com>
    
      2# PKGBUILD inspiration from fira-code
    
      3pkgbase=alibabasans-hk-fonts
    
      4pkgname=({eot,otf,ttf,woff,woff2}-"${pkgbase}")
    
      5_fontname=AlibabaSansHK
    
      6pkgver=1.0
    
      7pkgrel=6
    
      8# fonts.alibabadesign.com has enabled Referer anti-hotlinking; a Referer from the same domain is required to download files.
    
      9DLAGENTS=('https::/usr/bin/curl -fLC - --referer https://fonts.alibabadesign.com/ -o %o %u')
    
      10pkgdesc="A typeface for creating alibaba sans hk in text.阿里巴巴普惠体繁体中文(HKSCS)4字重"
    
      11arch=("any")
    
      12url="https://fonts.alibabagroup.com/#/font"
    
      13license=("LicenseRef-custom")
    
      14source=(
    
      15    "${pkgbase}-${pkgver}.zip::https://fonts.alibabadesign.com/${_fontname}.zip"
    
      16    "license.txt"
    
      17)
    
      18sha256sums=('2a3f977aa6d6f8f7abf4ffb01f033dfd606492a99a002b4163c463052b165cb6'
    
      19            '2588d7120fe60eab0cfe10c8929c93cdcb57e86644e47ad645f0cc1857b02fc4')
    
      20function _package {
    
      21    local _pkgname=$1
    
      22    local ext="${_pkgname%%-*}"
    
      23    for num in 45 55 75 95;do
    
      24        cd "${srcdir}/${_fontname}/${_fontname}-${num}"
    
      25        local fonts=("${_fontname}"*."${ext}")
    
      26        local installdir="${ext^^}"
    
      27        # Prepare destination directory
    
      28        install -dm755 "${pkgdir}/usr/share/fonts/${installdir}"
    
      29        # Install fonts
    
      30        local font
    
      31            for font in "${fonts[@]}"; do
    
      32            install -Dm644 "${font}" -t "${pkgdir}/usr/share/fonts/${installdir}"
    
      33            install -Dm644 "${srcdir}/license.txt" -t "${pkgdir}/usr/share/licenses/${ext}-${pkgbase}"
    
      34        done
    
      35    done
    
      36}
    
      37for _pkgname in "${pkgname[@]}"; do
    
      38    eval "function package_${_pkgname}() { _package ${_pkgname}; }"
    
      39done
    
      40

Changes since previous scan

--- PKGBUILD @ 2026-06-19 23:51
+++ PKGBUILD @ 2026-11-03 00:04
@@ -4,7 +4,9 @@
 pkgname=({eot,otf,ttf,woff,woff2}-"${pkgbase}")
 _fontname=AlibabaSansHK
 pkgver=1.0
-pkgrel=5
+pkgrel=6
+# fonts.alibabadesign.com has enabled Referer anti-hotlinking; a Referer from the same domain is required to download files.
+DLAGENTS=('https::/usr/bin/curl -fLC - --referer https://fonts.alibabadesign.com/ -o %o %u')
 pkgdesc="A typeface for creating alibaba sans hk in text.阿里巴巴普惠体繁体中文(HKSCS)4字重"
 arch=("any")
 url="https://fonts.alibabagroup.com/#/font"
@@ -35,3 +37,4 @@
 for _pkgname in "${pkgname[@]}"; do
     eval "function package_${_pkgname}() { _package ${_pkgname}; }"
 done
+

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-03 00:04:01	Medium	1
2026-06-19 23:51:18	Clean	2
2026-06-19 22:34:54	Medium	1