languagetool-ngrams-nl

maintainer Jaja · 1 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a data file (n-gram dataset) for LanguageTool, hosted on the project's official domain, used for Dutch language support;虽 hosted on a non-whitelisted domain, it is non-executable linguistic data, and the worst case of tampering is degraded or incorrect spell-checking, not code execution.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 90%): The source is a data file (n-gram dataset) for LanguageTool, hosted on the project's official domain, used for Dutch language support;虽 hosted on a non-whitelisted domain, it is non-executable linguistic data, and the worst case of tampering is degraded or incorrect spell-checking, not code execution.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:15 source=(${pkgname}-${pkgver}.zip::"https://languagetool.org/download/ngram-data/ngrams-nl-${pkgver}.zip")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Jaja <jaja@mailbox.org>
    
      2#
    
      3
    
      4pkgname=languagetool-ngrams-nl
    
      5pkgver=20181229
    
      6pkgrel=1
    
      7pkgdesc="Finding errors using n-gram data, dutch text"
    
      8arch=('any')
    
      9url="http://wiki.languagetool.org/finding-errors-using-n-gram-data"
    
      10license=('CCPL')
    
      11optdepends=('languagetool: system wide installation of LT'
    
      12'libreoffice-extension-languagetool: standalone LT for LibreOffice'
    
      13'openoffice-extension-languagetool: standalone LT for OpenOffice')
    
      14install=${pkgname}.install
    
      15source=(${pkgname}-${pkgver}.zip::"https://languagetool.org/download/ngram-data/ngrams-nl-${pkgver}.zip")
    
      16md5sums=('e94012c08b4c960f36e090dc29646ef7')
    
      17PKGEXT='.pkg.tar'
    
      18options=(!strip)
    
      19
    
      20prepare() {
    
      21  echo ''
    
      22  echo 'Warning:'
    
      23  echo '· This package requires about 2.4G to be available within /usr/share.'
    
      24  echo '· Make sure you have a _fast_ disk serving /usr/share, i.e. an SSD. Without an SSD, using this data can make LanguageTool much slower.'
    
      25  echo '· Because of size, you may run out of RAM if you use tmpfs aware aur helpers.'
    
      26  echo '· The install script will modify your configuration files in each home directory.'
    
      27  echo ''
    
      28}
    
      29
    
      30package() {
    
      31  install -d "${pkgdir}"/usr/share/ngrams
    
      32  unlink "${srcdir}"/${pkgname}-${pkgver}.zip
    
      33  mv "${srcdir}"/* "${pkgdir}"/usr/share/ngrams/
    
      34}
    
      35

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2