otf-alibabasans-puhuiti2-fonts

MEDIUM

maintainer zxp19821005 0 votes base alibabasans-puhuiti2-fonts scanned 2026-11-03 00:04:01.898975

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:13 "${pkgbase}-${pkgver}.zip::https://fonts.alibabadesign.com/${_fontname}.zip"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: zxp19821005 <zxp19821005 at 163 dot com>
    
      2# PKGBUILD inspiration from fira-code
    
      3pkgbase=alibabasans-puhuiti2-fonts
    
      4pkgname=({eot,otf,ttf,woff,woff2}-"${pkgbase}")
    
      5_fontname=AlibabaPuHuiTi-2
    
      6pkgver=2.0
    
      7pkgrel=5
    
      8pkgdesc="A typeface for creating alibaba sans puhuiti2 in text.阿里巴巴普惠体简体中文(2.0),9字重"
    
      9arch=("any")
    
      10url="https://fonts.alibabagroup.com/#/font"
    
      11license=("LicenseRef-custom")
    
      12source=(
    
      13    "${pkgbase}-${pkgver}.zip::https://fonts.alibabadesign.com/${_fontname}.zip"
    
      14    "license.txt"
    
      15)
    
      16sha256sums=('9ad37e0756cd5383abde2757da65c8a4da934a2215a869267ec688c6ec2843c5'
    
      17            '5fa72680af66db4f5c30c97fca7a8a6af31801d227675348a93b1c4126e61b61')
    
      18function _package {
    
      19    rm -rf "${srcdir}/${_fontname}/${_fontname}-35-Thin/${_fontname}-35-Thin.zip"
    
      20    local _pkgname=$1
    
      21    local ext="${_pkgname%%-*}"
    
      22    for num in 105-Heavy 115-Black 35-Thin 45-Light 55-Regular 65-Medium 75-SemiBold 85-Bold 95-ExtraBold;do
    
      23        cd "${srcdir}/${_fontname}/${_fontname}-${num}"
    
      24        local fonts=("${_fontname}-${num}.${ext}")
    
      25        local installdir="${ext^^}"
    
      26        # Prepare destination directory
    
      27        install -dm755 "${pkgdir}/usr/share/fonts/${installdir}"
    
      28        # Install fonts
    
      29        local font
    
      30            for font in "${fonts[@]}"; do
    
      31            install -m644 "${font}" "${pkgdir}/usr/share/fonts/${installdir}"
    
      32            install -Dm644 "${srcdir}/license.txt" -t "${pkgdir}/usr/share/licenses/${ext}-${pkgbase}"
    
      33        done
    
      34    done
    
      35}
    
      36for _pkgname in "${pkgname[@]}"; do
    
      37    eval "function package_${_pkgname}() { _package ${_pkgname}; }"
    
      38done

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-03 00:04:01	Medium	1
2026-06-20 00:18:46	Medium	1
2026-06-19 23:51:18	Clean	2
2026-06-19 19:07:35	Low	2
2026-06-18 16:11:54	Medium	1