noto-fonts-full-variable-slim-git
LOW
maintainer orphaned
1 votes
base
noto-fonts-git
scanned 2026-09-17 00:27:14.276658
Why flagged
The pip install is part of building the project's own fonts from its official GitHub repository, using its declared requirements.txt; the installed packages are build dependencies, not external malicious code.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The pip install is part of building the project's own fonts from its official GitHub repository, using its declared requirements.txt; the installed packages are build dependencies, not external malicious code.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
pip install of an external package
pip_install_external
`pip install <package>` fetches an unpinned package from PyPI at build time, outside source=() and makepkg's checksums.
-
PKGBUILD:65
python -m pip install --upgrade pip -
PKGBUILD:66
python -m pip install --upgrade virtualenv -
PKGBUILD:74
python -m pip install --upgrade -r requirements.txt
PKGBUILD
3 offending line(s) highlighted
1
# Maintainer: Johannes Jöns <johannes@joens.email>
2
pkgbase=noto-fonts-git
3
pkgname=('noto-fonts-hinted-git' 'noto-fonts-unhinted-git'
4
'noto-fonts-unhinted-variable-git' 'noto-fonts-unhinted-variable-slim-git'
5
'noto-fonts-full-git' 'noto-fonts-full-variable-git' 'noto-fonts-full-variable-slim-git')
6
pkgver=r5.efa9c9f
7
pkgrel=1
8
pkgdesc="Noto fonts git version"
9
arch=(any)
10
url="https://github.com/notofonts/"
11
license=('OFL')
12
makedepends=('git' 'python' 'python-pip' 'python-cairocffi')
13
conflicts=(noto-fonts{,-extra,})
14
provides=(noto-fonts{,-extra,})
15
source=("git+https://github.com/jopejoe1-aur/noto-fonts" "activate"
16
"66-noto-sans.conf" "66-noto-serif.conf" "66-noto-mono.conf"
17
"46-noto-sans.conf" "46-noto-serif.conf" "46-noto-mono.conf")
18
sha256sums=('SKIP'
19
'11a256a464d24c66d52c109868cbc5c0e40fe7f125dc7762b862e62af1764fd9'
20
'52684bebf6447be22618d2a04ff37623ec92f9d8ccf6b6f972e5bcbcfee90d69'
21
'4459944b63dc083107280f5d7375c69746bf80a09416a4a4909a100e58e5a33a'
22
'4526289f59654e2a81dc734669a1ae4e416f9a56d0896ec3741c6bf065baf8a8'
23
'83a8faf6a47954075f97a2d555048e2a6689c38603b2ca00150157bf645f4593'
24
'c94368b24506770767d003e5bcba589a8e402e489c240ee52453bf3ac7e9b5fa'
25
'f5c09b37280d7569b6c99a78511639be4ae25b8c5406464422fe0421fe13a884')
26
27
_blocklist=(Arimo test armenian Cousine hanifi-rohingya multani old-hungarian-ui Tinos)
28
29
pkgver() {
30
cd "${srcdir}/noto-fonts"
31
printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
32
}
33
34
prepare() {
35
cd "${srcdir}"
36
rm -rf "venv"
37
cd "noto-fonts"
38
git submodule update --init --recursive
39
40
for font in "${_blocklist[@]}"; do
41
rm -rf "$font"
42
done
43
44
for dir in */; do
45
cd "$dir"
46
rm -rf "subset-files"
47
rm -rf "venv"
48
mkdir "subset-files"
49
cd "subset-files"
50
ln -s "${srcdir}/noto-fonts/latin-greek-cyrillic"
51
cd ../..
52
done
53
}
54
55
build() {
56
cd "$srcdir/noto-fonts"
57
for dir in */; do
58
cd "$dir"
59
if [ -e "$srcdir/venv/bin/activate" ]; then
60
input="$srcdir/noto-fonts/$dir/venv"
61
activate=$(cat "$srcdir/activate")
62
activate="${activate//§TO_BE_REPLACED/$input}"
63
echo "$activate" > "$srcdir/venv/bin/activate"
64
else
65
python -m pip install --upgrade pip
66
python -m pip install --upgrade virtualenv
67
python -m virtualenv "$srcdir/venv"
68
input="$srcdir/noto-fonts/$dir/venv"
69
activate=$(cat "$srcdir/activate")
70
activate="${activate//§TO_BE_REPLACED/$input}"
71
echo "$activate" > "$srcdir/venv/bin/activate"
72
fi
73
source "$srcdir/venv/bin/activate"
74
python -m pip install --upgrade -r requirements.txt
75
python -m fontmake -o variable --print-preview -m "Master_dev.designspace"
76
deactivate
77
cd ..
78
done
79
}
80
81
_package() {
82
# Install fontconfig files
83
install -Dm644 "$srcdir"/*.conf -t "$pkgdir"/usr/share/fontconfig/conf.avail/
84
install -d "$pkgdir"/usr/share/fontconfig/conf.default
85
ln -rs "$pkgdir"/usr/share/fontconfig/conf.avail/* "$pkgdir"/usr/share/fontconfig/conf.default
86
}
87
88
package_noto-fonts-hinted-git() {
89
_package
90
pkgdesc+=' (hinted)'
91
conflicts+=(noto-fonts-unhinted-git noto-fonts-unhinted-variable-git noto-fonts-unhinted-variable-slim-git noto-fonts-full-git noto-fonts-full-variable-git noto-fonts-full-variable-slim-git)
92
93
install -vDm644 -t "${pkgdir}"/usr/share/fonts/noto/ \
94
${srcdir}/noto-fonts/*/fonts/*/hinted/ttf/*
95
}
96
97
package_noto-fonts-unhinted-git() {
98
_package
99
pkgdesc+=' (unhinted)'
100
conflicts+=(noto-fonts-hinted-git noto-fonts-unhinted-variable-git noto-fonts-unhinted-variable-slim-git noto-fonts-full-git noto-fonts-full-variable-git noto-fonts-full-variable-slim-git)
101
102
install -vDm644 -t "${pkgdir}"/usr/share/fonts/noto/ \
103
${srcdir}/noto-fonts/*/fonts/*/unhinted/ttf/*
104
}
105
106
package_noto-fonts-unhinted-variable-git() {
107
_package
108
pkgdesc+=' (unhinted variable)'
109
conflicts+=(noto-fonts-hinted-git noto-fonts-unhinted-git noto-fonts-unhinted-variable-slim-git noto-fonts-full-git noto-fonts-full-variable-git noto-fonts-full-variable-slim-git)
110
111
install -vDm644 -t "${pkgdir}"/usr/share/fonts/noto/ \
112
${srcdir}/noto-fonts/*/fonts/*/unhinted/variable-ttf/*
113
}
114
115
package_noto-fonts-unhinted-variable-slim-git() {
116
_package
117
pkgdesc+=' (unhinted variable slim)'
118
conflicts+=(noto-fonts-hinted-git noto-fonts-unhinted-git noto-fonts-unhinted-variable-git noto-fonts-full-git noto-fonts-full-variable-git noto-fonts-full-variable-slim-git)
119
120
install -vDm644 -t "${pkgdir}"/usr/share/fonts/noto/ \
121
${srcdir}/noto-fonts/*/fonts/*/unhinted/slim-variable-ttf/*
122
}
123
124
package_noto-fonts-full-git() {
125
_package
126
pkgdesc+=' (full)'
127
conflicts+=(noto-fonts-hinted-git noto-fonts-unhinted-git noto-fonts-unhinted-variable-git noto-fonts-unhinted-variable-slim-git noto-fonts-full-variable-git noto-fonts-full-variable-slim-git)
128
129
install -vDm644 -t "${pkgdir}"/usr/share/fonts/noto/ \
130
${srcdir}/noto-fonts/*/fonts/*/full/ttf/*
131
}
132
133
package_noto-fonts-full-variable-git() {
134
_package
135
pkgdesc+=' (full variable)'
136
conflicts+=(noto-fonts-hinted-git noto-fonts-unhinted-git noto-fonts-unhinted-variable-git noto-fonts-unhinted-variable-slim-git noto-fonts-full-git noto-fonts-full-variable-slim-git)
137
138
install -vDm644 -t "${pkgdir}"/usr/share/fonts/noto/ \
139
${srcdir}/noto-fonts/*/fonts/*/full/variable-ttf/*
140
}
141
142
package_noto-fonts-full-variable-slim-git() {
143
_package
144
pkgdesc+=' (full variable slim)'
145
conflicts+=(noto-fonts-hinted-git noto-fonts-unhinted-git noto-fonts-unhinted-variable-git noto-fonts-unhinted-variable-slim-git noto-fonts-full-git noto-fonts-full-variable-git)
146
147
install -vDm644 -t "${pkgdir}"/usr/share/fonts/noto/ \
148
${srcdir}/noto-fonts/*/fonts/*/full/slim-variable-ttf/*
149
}
150
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |