fontra-pak-bin

LOW

maintainer simonweiss 0 votes scanned 2026-10-17 15:18:35.857371

View on AUR

Why flagged

The package installs a prebuilt binary from the project's official GitHub release, which is normal for PyInstaller bundles; the only risk is the unverifiable nature of the binary, but it comes from the legitimate project source.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's official GitHub release, which is normal for PyInstaller bundles; the only risk is the unverifiable nature of the binary, but it comes from the legitimate project source.

PKGBUILD

      1# Maintainer: Simon Weiss <wonder [at] simonweiss [dot] space>
    
      2
    
      3pkgname=fontra-pak-bin
    
      4pkgver=2026.10.0
    
      5pkgrel=1
    
      6# Tag 2026.10.0 does not contain icon/FontraIcon.svg, so this commit supplies it.
    
      7# On each pkgver bump, check the new tag. If it contains the icon, use $pkgver
    
      8# as the ref. Then remove _iconcommit.
    
      9_iconcommit=14c2a5fa6a8f397d4dd06643a4cb7ab0385f3600
    
      10pkgdesc="Cross-platform bundled Fontra server and font editor for local desktop use (prebuilt binary)"
    
      11arch=('x86_64')
    
      12url="https://github.com/fontra/fontra-pak"
    
      13license=('GPL-3.0-only')
    
      14# The release tarball holds one PyInstaller onefile binary. Its bundle contains
    
      15# Python, Qt6, glib, libX11, libstdc++, libgcc_s, fontconfig and freetype.
    
      16# This list holds the host libraries that the bundled files link to
    
      17# (readelf NEEDED, minus the bundle).
    
      18depends=(
    
      19  'glibc'
    
      20  'hicolor-icon-theme'
    
      21  'libdrm'
    
      22  'libglvnd'
    
      23  'libxcb'
    
      24  'libxkbcommon-x11'
    
      25  'wayland'
    
      26  'xcb-util'
    
      27  'xcb-util-cursor'
    
      28  'xcb-util-image'
    
      29  'xcb-util-keysyms'
    
      30  'xcb-util-renderutil'
    
      31  'xcb-util-wm'
    
      32  'zlib'
    
      33)
    
      34optdepends=(
    
      35  'xdg-utils: open the font editor in the default web browser'
    
      36)
    
      37provides=("fontra-pak=$pkgver")
    
      38conflicts=('fontra-pak')
    
      39# The makepkg strip step damages the archive that PyInstaller appends to the binary.
    
      40# Without '!debug', makepkg still scans the binary for debug source files.
    
      41options=('!strip' '!debug')
    
      42source=(
    
      43  "$pkgname-$pkgver.tgz::$url/releases/download/$pkgver/FontraPak-Ubuntu.tgz"
    
      44  "FontraIcon-$_iconcommit.svg::$url/raw/$_iconcommit/icon/FontraIcon.svg"
    
      45  'fontrapak.desktop'
    
      46)
    
      47sha256sums=('fcebe80d372d1457052f975261f59887b161bb2ada547e88f613941323eac961'
    
      48            '29e4375cb3ae4bf1ef62312089081c97e29633f41c076814c9116aa1577b646d'
    
      49            'e4233a22a37cde64be1bc9b3639806e6cbb7bfc43857ea3e213761c05065b066')
    
      50
    
      51package() {
    
      52  install -Dm755 fontrapak -t "$pkgdir/usr/bin/"
    
      53
    
      54  # The desktop file ID and the icon name match the Qt app_id and WM_CLASS
    
      55  # "fontrapak". This also prevents a conflict with the Flatpak ID.
    
      56  install -Dm644 fontrapak.desktop -t "$pkgdir/usr/share/applications/"
    
      57  install -Dm644 "FontraIcon-$_iconcommit.svg" "$pkgdir/usr/share/icons/hicolor/scalable/apps/fontrapak.svg"
    
      58}
    
      59

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 15:18:35	Low	2