languagetool-ngrams-ru

LOW

maintainer Jaja 1 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The package downloads a large n-gram data file for Russian language support from the official LanguageTool domain;虽非标准主机 but the source is non-executable linguistic data, not code, and the download is from the project's own domain, making it a legitimate and low-risk use.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a large n-gram data file for Russian language support from the official LanguageTool domain;虽非标准主机 but the source is non-executable linguistic data, not code, and the download is from the project's own domain, making it a legitimate and low-risk use.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:15 source=(${pkgname}-${pkgver}.zip::"https://languagetool.org/download/ngram-data/untested/ngram-ru-${pkgver}.zip")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Jaja <jaja@mailbox.org>
    
      2#
    
      3
    
      4pkgname=languagetool-ngrams-ru
    
      5pkgver=20150914
    
      6pkgrel=1
    
      7pkgdesc="Finding errors using n-gram data, russian text"
    
      8arch=('any')
    
      9url="http://wiki.languagetool.org/finding-errors-using-n-gram-data"
    
      10license=('CCPL')
    
      11optdepends=('languagetool: system wide installation of LT'
    
      12'libreoffice-extension-languagetool: standalone LT for LibreOffice'
    
      13'openoffice-extension-languagetool: standalone LT for OpenOffice')
    
      14install=${pkgname}.install
    
      15source=(${pkgname}-${pkgver}.zip::"https://languagetool.org/download/ngram-data/untested/ngram-ru-${pkgver}.zip")
    
      16md5sums=('faa5db4c3ca7f6f702f2cdba54b08766')
    
      17PKGEXT='.pkg.tar'
    
      18options=(!strip)
    
      19
    
      20prepare() {
    
      21  echo ''
    
      22  echo 'Warning:'
    
      23  echo '· This package requires about 5.0G to be available within /usr/share.'
    
      24  echo '· Make sure you have a _fast_ disk serving /usr/share, i.e. an SSD. Without an SSD, using this data can make LanguageTool much slower.'
    
      25  echo '· Because of size, you may run out of RAM if you use tmpfs aware aur helpers.'
    
      26  echo '· The install script will modify your configuration files in each home directory.'
    
      27  echo ''
    
      28}
    
      29
    
      30package() {
    
      31  install -d "${pkgdir}"/usr/share/ngrams
    
      32  unlink "${srcdir}"/${pkgname}-${pkgver}.zip
    
      33  mv "${srcdir}"/* "${pkgdir}"/usr/share/ngrams/
    
      34}
    
      35

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 00:29:17	Low	2