rime-pinyin-zhwiktionary
LOW
maintainer orphaned
0 votes
base
fcitx5-pinyin-zhwiktionary-git
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads a data dump from Wikimedia's official dump server to build a dictionary; the source is non-executable data from a plausible project-related host, and the build process is transparent.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a data dump from Wikimedia's official dump server to build a dictionary; the source is non-executable data from a plausible project-related host, and the build process is transparent.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:17
https://dumps.wikimedia.org/zhwiktionary/$_zhwiktionaryver/zhwiktionary-$_zhwiktionaryver-all-titles-in-ns0.gz
PKGBUILD
1 offending line(s) highlighted
1
# Contributor: Kisaragi Hiu <mail@kisaragi-hiu.com>
2
# Contributor: Felix Yan <felixonmars@archlinux.org>
3
# Maintainer: Kasei Wang <kasei@kasei.im>
4
5
pkgbase=fcitx5-pinyin-zhwiktionary-git
6
_converter=fcitx5-pinyin-zhwiki
7
pkgname=(fcitx5-pinyin-zhwiktionary rime-pinyin-zhwiktionary)
8
_zhwiktionaryver=latest
9
pkgver=0.20240401
10
pkgrel=1
11
pkgdesc="Fcitx 5 Pinyin Dictionary from zh.wiktionary.org"
12
arch=('any')
13
url="https://github.com/kaseiwang/fcitx5-pinyin-zhwiki"
14
license=('CCPL:by-sa' 'custom:GFDL')
15
makedepends=('libime' 'opencc' 'pypinyin')
16
source=(git+https://github.com/kaseiwang/fcitx5-pinyin-zhwiki
17
https://dumps.wikimedia.org/zhwiktionary/$_zhwiktionaryver/zhwiktionary-$_zhwiktionaryver-all-titles-in-ns0.gz
18
https://dumps.wikimedia.org/zhwiktionary/$_zhwiktionaryver/zhwiktionary-$_zhwiktionaryver-md5sums.txt
19
https://www.gnu.org/licenses/fdl-1.3.txt)
20
sha512sums=('SKIP'
21
'SKIP'
22
'SKIP'
23
'22d46818d3998ad841f537af4de7c50440dd918099fb6c5d4ab324cd71dc03066bfe1b67210a5efde77abd1d97b88da3c3dbfc39a24ae7248ee2d64e7f0fe6bb')
24
25
_make="make -L VERSION=$_zhwiktionaryver"
26
27
pkgver() {
28
if [[ $(head -1 zhwiktionary-$_zhwiktionaryver-md5sums.txt) =~ [[:digit:]]{8} ]]; then
29
echo 0.${BASH_REMATCH[0]}
30
fi
31
}
32
33
prepare() {
34
cd $_converter
35
# Workaround pacman decompression
36
touch zhwiktionary-$_zhwiktionaryver-all-titles-in-ns0.gz
37
ln -sf ../zhwiktionary-$_zhwiktionaryver-all-titles-in-ns0
38
}
39
40
build() {
41
cd $_converter
42
$_make zhwiktionary.dict zhwiktionary.dict.yaml
43
}
44
45
package_fcitx5-pinyin-zhwiktionary() {
46
cd $_converter
47
$_make DESTDIR="$pkgdir" install
48
install -Dm644 ../fdl-1.3.txt -t "$pkgdir"/usr/share/licenses/$pkgname/
49
}
50
51
package_rime-pinyin-zhwiktionary() {
52
cd $_converter
53
$_make DESTDIR="$pkgdir" install_rime_dict
54
install -Dm644 ../fdl-1.3.txt -t "$pkgdir"/usr/share/licenses/$pkgname/
55
}
56
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |