eusoft-ting-de

MEDIUM

maintainer Chapman 0 votes scanned 2026-10-09 02:12:05.690464

View on AUR

Why flagged

Downloads a prebuilt proprietary .deb binary from static.eudic.net (the vendor's own CDN) and installs it directly; the host appears to be the official Eudic/Eusoft distribution server, but it is a prebuilt closed-source executable with a checksum provided, making it a medium-risk community repackage of an unauditable binary rather than a source build.

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:36 "${pkgname}-${pkgver}.deb::https://static.eudic.net/pkg/ting_de/ting_de.deb"

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review llm_review

An AI model (anthropic/claude-sonnet-4.6) reviewed this and agrees it is MEDIUM (confidence 70%): Downloads a prebuilt proprietary .deb binary from static.eudic.net (the vendor's own CDN) and installs it directly; the host appears to be the official Eudic/Eusoft distribution server, but it is a prebuilt closed-source executable with a checksum provided, making it a medium-risk community repackage of an unauditable binary rather than a source build.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Chapman <touch65536@gmail.com>
    
      2
    
      3pkgname=eusoft-ting-de
    
      4pkgver=26.9.0
    
      5pkgrel=1
    
      6pkgdesc="Daily German Listening (每日德语听力) for Linux (Community Repackage)"
    
      7arch=('x86_64')
    
      8url="https://www.eudic.net/v4/de/app/ting"
    
      9license=('LicenseRef-Proprietary')
    
      10provides=('ting-de' 'eusoft-ting-de')
    
      11conflicts=('ting-de')
    
      12depends=(
    
      13    'alsa-lib'
    
      14    'at-spi2-core'
    
      15    'gtk3'
    
      16    'hicolor-icon-theme'
    
      17    'libnotify'
    
      18    'libsecret'
    
      19    'libxss'
    
      20    'libxtst'
    
      21    'nss'
    
      22    'util-linux-libs'
    
      23    'xdg-utils'
    
      24)
    
      25optdepends=(
    
      26    'noto-fonts-cjk: Chinese font support'
    
      27)
    
      28options=(!strip !debug)
    
      29
    
      30source=(
    
      31    "ting-de.sh"
    
      32    "eusoft-ting-de.desktop"
    
      33    "LICENSE"
    
      34)
    
      35source_x86_64=(
    
      36    "${pkgname}-${pkgver}.deb::https://static.eudic.net/pkg/ting_de/ting_de.deb"
    
      37)
    
      38noextract=("${pkgname}-${pkgver}.deb")
    
      39
    
      40sha256sums=(
    
      41    '4786630c0b65924a45fb7d5aebdcb6bf90dedd9f28a5f53aaa063123fb75c684'
    
      42    '4d809e11be94f592c45a858ca95340d39388826b8a0c0820e504688dc3220908'
    
      43    'cf9ba50ac9a100c03be7e11953e99443a5e8d26ed2f4453ecc454113778b668c'
    
      44)
    
      45sha256sums_x86_64=(
    
      46    '46ff02b3bd5d08289ce230530d2000f2b1b4a876328900d623ffca94f810b2bb'
    
      47)
    
      48
    
      49prepare() {
    
      50    bsdtar -xf "${pkgname}-${pkgver}.deb" data.tar.xz
    
      51}
    
      52
    
      53package() {
    
      54    # Extract opt and usr hierarchies from official deb data
    
      55    tar -xf data.tar.xz -C "${pkgdir}"
    
      56
    
      57    # Install clean launcher script
    
      58    install -Dm755 "${srcdir}/ting-de.sh" "${pkgdir}/usr/bin/ting-de"
    
      59    ln -sf ting-de "${pkgdir}/usr/bin/${pkgname}"
    
      60
    
      61    # Install desktop entry
    
      62    install -Dm644 "${srcdir}/eusoft-ting-de.desktop" "${pkgdir}/usr/share/applications/eusoft-ting-de.desktop"
    
      63    ln -sf eusoft-ting-de.desktop "${pkgdir}/usr/share/applications/ting_de.desktop"
    
      64
    
      65    # Install license
    
      66    install -Dm644 "${srcdir}/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      67
    
      68    # Ensure executable permissions for electron binary
    
      69    chmod 755 "${pkgdir}/opt/每日德语听力/ting_de"
    
      70
    
      71    # Normalize directory permissions
    
      72    find "${pkgdir}" -type d -exec chmod 755 {} +
    
      73}
    
      74

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-09 02:12:05	Medium	3
2026-10-09 02:10:17	Medium	3