noto-fonts-full-variable-git

maintainer orphaned · 1 votes · base noto-fonts-git · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The pip install is part of building the project's own fonts from its official GitHub repository, using its declared requirements.txt; the installed packages are build dependencies, not external malicious code.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The pip install is part of building the project's own fonts from its official GitHub repository, using its declared requirements.txt; the installed packages are build dependencies, not external malicious code.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM pip install of an external package pip_install_external

`pip install <package>` fetches an unpinned package from PyPI at build time, outside source=() and makepkg's checksums.

PKGBUILD:65 python -m pip install --upgrade pip
PKGBUILD:66 python -m pip install --upgrade virtualenv
PKGBUILD:74 python -m pip install --upgrade -r requirements.txt

PKGBUILD

3 offending line(s) highlighted

      1# Maintainer: Johannes Jöns <johannes@joens.email>
    
      2pkgbase=noto-fonts-git
    
      3pkgname=('noto-fonts-hinted-git' 'noto-fonts-unhinted-git'
    
      4         'noto-fonts-unhinted-variable-git' 'noto-fonts-unhinted-variable-slim-git'
    
      5         'noto-fonts-full-git' 'noto-fonts-full-variable-git' 'noto-fonts-full-variable-slim-git')
    
      6pkgver=r5.efa9c9f
    
      7pkgrel=1
    
      8pkgdesc="Noto fonts git version"
    
      9arch=(any)
    
      10url="https://github.com/notofonts/"
    
      11license=('OFL')
    
      12makedepends=('git' 'python' 'python-pip' 'python-cairocffi')
    
      13conflicts=(noto-fonts{,-extra,})
    
      14provides=(noto-fonts{,-extra,})
    
      15source=("git+https://github.com/jopejoe1-aur/noto-fonts" "activate"
    
      16        "66-noto-sans.conf" "66-noto-serif.conf" "66-noto-mono.conf"
    
      17        "46-noto-sans.conf" "46-noto-serif.conf" "46-noto-mono.conf")
    
      18sha256sums=('SKIP'
    
      19            '11a256a464d24c66d52c109868cbc5c0e40fe7f125dc7762b862e62af1764fd9'
    
      20            '52684bebf6447be22618d2a04ff37623ec92f9d8ccf6b6f972e5bcbcfee90d69'
    
      21            '4459944b63dc083107280f5d7375c69746bf80a09416a4a4909a100e58e5a33a'
    
      22            '4526289f59654e2a81dc734669a1ae4e416f9a56d0896ec3741c6bf065baf8a8'
    
      23            '83a8faf6a47954075f97a2d555048e2a6689c38603b2ca00150157bf645f4593'
    
      24            'c94368b24506770767d003e5bcba589a8e402e489c240ee52453bf3ac7e9b5fa'
    
      25            'f5c09b37280d7569b6c99a78511639be4ae25b8c5406464422fe0421fe13a884')
    
      26
    
      27_blocklist=(Arimo test armenian Cousine hanifi-rohingya multani old-hungarian-ui Tinos)
    
      28
    
      29pkgver() {
    
      30    cd "${srcdir}/noto-fonts"
    
      31    printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
    
      32}
    
      33
    
      34prepare() {
    
      35    cd "${srcdir}"
    
      36    rm -rf "venv"
    
      37    cd "noto-fonts"
    
      38    git submodule update --init --recursive
    
      39
    
      40    for font in "${_blocklist[@]}"; do
    
      41        rm -rf "$font"
    
      42    done
    
      43
    
      44    for dir in */; do
    
      45        cd "$dir"
    
      46        rm -rf "subset-files"
    
      47        rm -rf "venv"
    
      48        mkdir "subset-files"
    
      49        cd "subset-files"
    
      50        ln -s "${srcdir}/noto-fonts/latin-greek-cyrillic"
    
      51        cd ../..
    
      52    done
    
      53}
    
      54
    
      55build() {
    
      56    cd "$srcdir/noto-fonts"
    
      57    for dir in */; do
    
      58        cd "$dir"
    
      59        if [ -e "$srcdir/venv/bin/activate" ]; then
    
      60            input="$srcdir/noto-fonts/$dir/venv"
    
      61            activate=$(cat "$srcdir/activate")
    
      62            activate="${activate//§TO_BE_REPLACED/$input}"
    
      63            echo "$activate" > "$srcdir/venv/bin/activate"
    
      64        else
    
      65            python -m pip install --upgrade pip
    
      66            python -m pip install --upgrade virtualenv
    
      67            python -m virtualenv "$srcdir/venv"
    
      68            input="$srcdir/noto-fonts/$dir/venv"
    
      69            activate=$(cat "$srcdir/activate")
    
      70            activate="${activate//§TO_BE_REPLACED/$input}"
    
      71            echo "$activate" > "$srcdir/venv/bin/activate"
    
      72        fi
    
      73        source "$srcdir/venv/bin/activate"
    
      74        python -m pip install --upgrade -r requirements.txt
    
      75        python -m fontmake -o variable --print-preview -m "Master_dev.designspace"
    
      76        deactivate
    
      77        cd ..
    
      78    done
    
      79}
    
      80
    
      81_package() {
    
      82  # Install fontconfig files
    
      83  install -Dm644 "$srcdir"/*.conf -t "$pkgdir"/usr/share/fontconfig/conf.avail/
    
      84  install -d "$pkgdir"/usr/share/fontconfig/conf.default
    
      85  ln -rs "$pkgdir"/usr/share/fontconfig/conf.avail/* "$pkgdir"/usr/share/fontconfig/conf.default
    
      86}
    
      87
    
      88package_noto-fonts-hinted-git() {
    
      89    _package
    
      90    pkgdesc+=' (hinted)'
    
      91    conflicts+=(noto-fonts-unhinted-git noto-fonts-unhinted-variable-git noto-fonts-unhinted-variable-slim-git noto-fonts-full-git noto-fonts-full-variable-git noto-fonts-full-variable-slim-git)
    
      92
    
      93    install -vDm644 -t "${pkgdir}"/usr/share/fonts/noto/ \
    
      94        ${srcdir}/noto-fonts/*/fonts/*/hinted/ttf/*
    
      95}
    
      96
    
      97package_noto-fonts-unhinted-git() {
    
      98    _package
    
      99    pkgdesc+=' (unhinted)'
    
      100    conflicts+=(noto-fonts-hinted-git noto-fonts-unhinted-variable-git noto-fonts-unhinted-variable-slim-git noto-fonts-full-git noto-fonts-full-variable-git noto-fonts-full-variable-slim-git)
    
      101
    
      102    install -vDm644 -t "${pkgdir}"/usr/share/fonts/noto/ \
    
      103        ${srcdir}/noto-fonts/*/fonts/*/unhinted/ttf/*
    
      104}
    
      105
    
      106package_noto-fonts-unhinted-variable-git() {
    
      107    _package
    
      108    pkgdesc+=' (unhinted variable)'
    
      109    conflicts+=(noto-fonts-hinted-git noto-fonts-unhinted-git noto-fonts-unhinted-variable-slim-git noto-fonts-full-git noto-fonts-full-variable-git noto-fonts-full-variable-slim-git)
    
      110
    
      111    install -vDm644 -t "${pkgdir}"/usr/share/fonts/noto/ \
    
      112        ${srcdir}/noto-fonts/*/fonts/*/unhinted/variable-ttf/*
    
      113}
    
      114
    
      115package_noto-fonts-unhinted-variable-slim-git() {
    
      116    _package
    
      117    pkgdesc+=' (unhinted variable slim)'
    
      118    conflicts+=(noto-fonts-hinted-git noto-fonts-unhinted-git noto-fonts-unhinted-variable-git noto-fonts-full-git noto-fonts-full-variable-git noto-fonts-full-variable-slim-git)
    
      119
    
      120    install -vDm644 -t "${pkgdir}"/usr/share/fonts/noto/ \
    
      121        ${srcdir}/noto-fonts/*/fonts/*/unhinted/slim-variable-ttf/*
    
      122}
    
      123
    
      124package_noto-fonts-full-git() {
    
      125    _package
    
      126    pkgdesc+=' (full)'
    
      127    conflicts+=(noto-fonts-hinted-git noto-fonts-unhinted-git noto-fonts-unhinted-variable-git noto-fonts-unhinted-variable-slim-git noto-fonts-full-variable-git noto-fonts-full-variable-slim-git)
    
      128
    
      129    install -vDm644 -t "${pkgdir}"/usr/share/fonts/noto/ \
    
      130        ${srcdir}/noto-fonts/*/fonts/*/full/ttf/*
    
      131}
    
      132
    
      133package_noto-fonts-full-variable-git() {
    
      134    _package
    
      135    pkgdesc+=' (full variable)'
    
      136    conflicts+=(noto-fonts-hinted-git noto-fonts-unhinted-git noto-fonts-unhinted-variable-git noto-fonts-unhinted-variable-slim-git noto-fonts-full-git noto-fonts-full-variable-slim-git)
    
      137
    
      138    install -vDm644 -t "${pkgdir}"/usr/share/fonts/noto/ \
    
      139        ${srcdir}/noto-fonts/*/fonts/*/full/variable-ttf/*
    
      140}
    
      141
    
      142package_noto-fonts-full-variable-slim-git() {
    
      143    _package
    
      144    pkgdesc+=' (full variable slim)'
    
      145    conflicts+=(noto-fonts-hinted-git noto-fonts-unhinted-git noto-fonts-unhinted-variable-git noto-fonts-unhinted-variable-slim-git noto-fonts-full-git noto-fonts-full-variable-git)
    
      146
    
      147    install -vDm644 -t "${pkgdir}"/usr/share/fonts/noto/ \
    
      148        ${srcdir}/noto-fonts/*/fonts/*/full/slim-variable-ttf/*
    
      149}
    
      150

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2