languagetool-ngrams-es

maintainer Jaja · 2 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads a large n-gram data file for LanguageTool from the project's official domain;虽非白名单主机但属项目自有资源，且安装的是非可执行语言数据，最坏情况为数据篡改，无远程代码执行风险。

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a large n-gram data file for LanguageTool from the project's official domain;虽非白名单主机但属项目自有资源，且安装的是非可执行语言数据，最坏情况为数据篡改，无远程代码执行风险。

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:15 source=(${pkgname}-${pkgver}.zip::"https://languagetool.org/download/ngram-data/ngrams-es-${pkgver}.zip")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Jaja <jaja@mailbox.org>
    
      2#
    
      3
    
      4pkgname=languagetool-ngrams-es
    
      5pkgver=20150915
    
      6pkgrel=2
    
      7pkgdesc="Finding errors using n-gram data, spanish text"
    
      8arch=('any')
    
      9url="http://wiki.languagetool.org/finding-errors-using-n-gram-data"
    
      10license=('CCPL')
    
      11optdepends=('languagetool: system wide installation of LT'
    
      12'libreoffice-extension-languagetool: standalone LT for LibreOffice'
    
      13'openoffice-extension-languagetool: standalone LT for OpenOffice')
    
      14install=${pkgname}.install
    
      15source=(${pkgname}-${pkgver}.zip::"https://languagetool.org/download/ngram-data/ngrams-es-${pkgver}.zip")
    
      16md5sums=('ebaa97d32d773fca0179f0517e45306f')
    
      17PKGEXT='.pkg.tar'
    
      18options=(!strip)
    
      19
    
      20prepare() {
    
      21  echo ''
    
      22  echo 'Warning:'
    
      23  echo '· This package requires about 3.1G to be available within /usr/share.'
    
      24  echo '· Make sure you have a _fast_ disk serving /usr/share, i.e. an SSD. Without an SSD, using this data can make LanguageTool much slower.'
    
      25  echo '· Because of size, you may run out of RAM if you use tmpfs aware aur helpers.'
    
      26  echo '· The install script will modify your configuration files in each home directory.'
    
      27  echo ''
    
      28}
    
      29
    
      30package() {
    
      31  install -d "${pkgdir}"/usr/share/ngrams
    
      32  unlink "${srcdir}"/${pkgname}-${pkgver}.zip
    
      33  mv "${srcdir}"/* "${pkgdir}"/usr/share/ngrams/
    
      34}
    
      35

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2