nerd-fonts-apple

MEDIUM

maintainer orangesoda 3 votes scanned 2026-10-25 17:43:03.910647

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:12 "SF-Pro.${pkgver}.dmg::https://devimages-cdn.apple.com/design/resources/download/SF-Pro.dmg"

PKGBUILD

1 offending line(s) highlighted

      1pkgname=nerd-fonts-apple
    
      2pkgver=3.5.1
    
      3pkgrel=3
    
      4arch=(any)
    
      5license=("custom")
    
      6pkgdesc="Apple font (San Francisco, NY), patched with the Nerd Fonts Patcher"
    
      7url="https://developer.apple.com/fonts/"
    
      8makedepends=("p7zip" "python" "parallel" "fontforge")
    
      9conflicts=("nerd-fonts-apple" "apple-fonts" "nerd-fonts-sf-mono")
    
      10provides=("nerd-fonts-apple" "ttf-font-nerd")
    
      11source=(
    
      12  "SF-Pro.${pkgver}.dmg::https://devimages-cdn.apple.com/design/resources/download/SF-Pro.dmg"
    
      13  "SF-Compact.${pkgver}.dmg::https://devimages-cdn.apple.com/design/resources/download/SF-Compact.dmg"
    
      14  "SF-Mono.${pkgver}.dmg::https://devimages-cdn.apple.com/design/resources/download/SF-Mono.dmg"
    
      15  "SF-Arabic.${pkgver}.dmg::https://devimages-cdn.apple.com/design/resources/download/SF-Arabic.dmg"
    
      16  "NY.${pkgver}.dmg::https://devimages-cdn.apple.com/design/resources/download/NY.dmg"
    
      17
    
      18  "font-patcher-$pkgver::https://github.com/ryanoasis/nerd-fonts/releases/download/v$pkgver/FontPatcher.zip"
    
      19)
    
      20sha256sums=('968ab3b8b1f92c2d8af61eb0680f5c2224c4e78d59b986bf004502a7fc012918'
    
      21            'c1d0e344ebadd66eb62f03f823784cce49f1787f56563fb098fca01fc554135c'
    
      22            '6d4a0b78e3aacd06f913f642cead1c7db4af34ed48856d7171a2e0b55d9a7945'
    
      23            '2760c62d502b77012c49517c2ea392ec2d4c647fe060985c927df48d105197b9'
    
      24            '1c2eedb4526cc0f326f8b7ea978f5a433756476a2c8c56072537608edb88f8f4'
    
      25            '42bcb32145499a35732274c7fc48deb434ad0d2e0e118f98527c1479c6fa251a')
    
      26
    
      27build() {
    
      28  mkdir -p "$srcdir/patched"
    
      29  for archive in *.dmg; do
    
      30    echo "unpack and patch: $archive"    
    
      31    local workdir="$srcdir/work_${archive%.dmg}"
    
      32    mkdir -p "$workdir"
    
      33    7z x -y "$archive" -o"$workdir" &>/dev/null
    
      34    local pkgFile
    
      35    pkgFile=$(find "$workdir" -type f -name "*.pkg" | head -n 1)
    
      36    
    
      37    if [[ -z "$pkgFile" ]]; then
    
      38      echo "Kon geen .pkg vinden in $archive"
    
      39      return 1
    
      40    fi
    
      41    mkdir -p "$workdir/extracted"
    
      42    bsdtar -xf "$pkgFile" -C "$workdir/extracted"
    
      43    local payloadFile
    
      44    payloadFile=$(find "$workdir/extracted" -type f -name "Payload" | head -n 1)
    
      45    bsdtar -xf "$payloadFile" -C "$workdir/extracted"
    
      46    case $archive in
    
      47      *Mono* ) 
    
      48        find "$workdir/extracted" -type f \( -name "*.ttf" -o -name "*.otf" \) -print0 | \
    
      49          parallel -j"$(nproc)" -0 python "$srcdir/font-patcher" -q -c -s {} -out "$srcdir/patched" &>/dev/null
    
      50        ;;
    
      51      * ) 
    
      52        find "$workdir/extracted" -type f \( -name "*.ttf" -o -name "*.otf" \) -print0 | \
    
      53          parallel -j"$(nproc)" -0 python "$srcdir/font-patcher" -q -c {} -out "$srcdir/patched" &>/dev/null
    
      54        ;;
    
      55    esac
    
      56  done
    
      57}
    
      58
    
      59package() {
    
      60  install -d "$pkgdir/usr/share/fonts/apple"
    
      61  install -m644 "$srcdir/patched/"*.{otf,ttf} "$pkgdir/usr/share/fonts/apple/" 2>/dev/null || true
    
      62}
    
      63

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-10-25 17:43
@@ -1,6 +1,6 @@
 pkgname=nerd-fonts-apple
-pkgver=3.4.0
-pkgrel=2
+pkgver=3.5.1
+pkgrel=3
 arch=(any)
 license=("custom")
 pkgdesc="Apple font (San Francisco, NY), patched with the Nerd Fonts Patcher"
@@ -17,36 +17,47 @@
 
   "font-patcher-$pkgver::https://github.com/ryanoasis/nerd-fonts/releases/download/v$pkgver/FontPatcher.zip"
 )
-sha256sums=('bbb70b6c84442d234551ad8e5bf640808bbabdb98affc9175ea53def1a6103ed'
-            '99c30cfdc6e6380e7293221bef86e277dbd4eb0ca5f2757092f91df9594e770a'
+sha256sums=('968ab3b8b1f92c2d8af61eb0680f5c2224c4e78d59b986bf004502a7fc012918'
+            'c1d0e344ebadd66eb62f03f823784cce49f1787f56563fb098fca01fc554135c'
             '6d4a0b78e3aacd06f913f642cead1c7db4af34ed48856d7171a2e0b55d9a7945'
             '2760c62d502b77012c49517c2ea392ec2d4c647fe060985c927df48d105197b9'
             '1c2eedb4526cc0f326f8b7ea978f5a433756476a2c8c56072537608edb88f8f4'
-            'a8f11e511ed7c69e96680858c06b50a643ea7752e26d5cd13dd5e5cc53ab1760')
+            '42bcb32145499a35732274c7fc48deb434ad0d2e0e118f98527c1479c6fa251a')
 
 build() {
-  local pwd="$(pwd)"
+  mkdir -p "$srcdir/patched"
   for archive in *.dmg; do
-    echo "unpack and patch: $archive"
-    7z x $archive &>/dev/null
-    local fontDir="$(echo $archive | cut -d. -f1 | tr -d '-')Fonts"
-    local pkgArchive="$(echo $archive | cut -d. -f1 | sed -r 's/-/ /g') Fonts.pkg"
-    local payload="${fontDir}.pkg/Payload"
-    cd -- "$srcdir/$fontDir"
-    bsdtar xvPf "$pkgArchive" &>/dev/null
-    bsdtar xvPf "$payload" &>/dev/null
+    echo "unpack and patch: $archive"    
+    local workdir="$srcdir/work_${archive%.dmg}"
+    mkdir -p "$workdir"
+    7z x -y "$archive" -o"$workdir" &>/dev/null
+    local pkgFile
+    pkgFile=$(find "$workdir" -type f -name "*.pkg" | head -n 1)
+    
+    if [[ -z "$pkgFile" ]]; then
+      echo "Kon geen .pkg vinden in $archive"
+      return 1
+    fi
+    mkdir -p "$workdir/extracted"
+    bsdtar -xf "$pkgFile" -C "$workdir/extracted"
+    local payloadFile
+    payloadFile=$(find "$workdir/extracted" -type f -name "Payload" | head -n 1)
+    bsdtar -xf "$payloadFile" -C "$workdir/extracted"
     case $archive in
-      *Mono* ) find -name *.ttf -o -name *.otf -print0 | parallel -j$(nproc) -0 python "$srcdir/font-patcher" -q -c -s {} -out "$srcdir/patched" &>/dev/null
-               ;;
-      * ) find -name *.ttf -o -name *.otf -print0 | parallel -j$(nproc) -0 python "$srcdir/font-patcher" -q -c {} -out "$srcdir/patched" &>/dev/null
-          ;;
+      *Mono* ) 
+        find "$workdir/extracted" -type f \( -name "*.ttf" -o -name "*.otf" \) -print0 | \
+          parallel -j"$(nproc)" -0 python "$srcdir/font-patcher" -q -c -s {} -out "$srcdir/patched" &>/dev/null
+        ;;
+      * ) 
+        find "$workdir/extracted" -type f \( -name "*.ttf" -o -name "*.otf" \) -print0 | \
+          parallel -j"$(nproc)" -0 python "$srcdir/font-patcher" -q -c {} -out "$srcdir/patched" &>/dev/null
+        ;;
     esac
-    cd -- "$pwd"
   done
 }
 
 package() {
   install -d "$pkgdir/usr/share/fonts/apple"
-  install -m644 "patched/"*.otf "$pkgdir/usr/share/fonts/apple"
+  install -m644 "$srcdir/patched/"*.{otf,ttf} "$pkgdir/usr/share/fonts/apple/" 2>/dev/null || true
 }
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-25 17:43:03	Medium	1
2026-06-19 19:07:35	Clean	2
2026-06-18 16:11:54	Medium	1