ttf-alimama-dongfangdakai

MEDIUM
maintainer zxp19821005 0 votes base alimama-dongfangdakai scanned 2026-11-03 00:04:01.898975
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:15 "${pkgbase}-${pkgver}.zip::https://fonts.alibabadesign.com/${_fontname}.zip"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: zxp19821005 <zxp19821005 at 163 dot com>
2# PKGBUILD inspiration from fira-code
3pkgbase=alimama-dongfangdakai
4pkgname=({otf,ttf,woff,woff2}-"${pkgbase}")
5_fontname=AlimamaDongFangDaKai
6pkgver=1.0
7pkgrel=6
8# fonts.alibabadesign.com has enabled Referer anti-hotlinking; a Referer from the same domain is required to download files.
9DLAGENTS=('https::/usr/bin/curl -fLC - --referer https://fonts.alibabadesign.com/ -o %o %u')
10pkgdesc="A typeface for creating alimama dongfangdakai viet in text.阿里妈妈东方大楷为中文简体字库,收纳的中文字符包括但不限于GB2312,共计6763个汉字"
11arch=("any")
12url="https://fonts.alibabagroup.com/#/more"
13license=("LicenseRef-custom")
14source=(
15 "${pkgbase}-${pkgver}.zip::https://fonts.alibabadesign.com/${_fontname}.zip"
16 "LICENSE"
17)
18sha256sums=('bb960f0f464a42c14ed215f4e1b4bde0b2e69bafe85be3e71ca1abf54c4ab553'
19 'abf3fdf5a6a4b50515c6fa5c92bcac6553ab6e8ac72869fba68e4a10b7603ac7')
20function _package {
21 local _pkgname=$1
22 local ext="${_pkgname%%-*}"
23 cd "${srcdir}"
24 local fonts=("${_fontname}-Regular.${ext}")
25 local installdir="${ext^^}"
26 # Prepare destination directory
27 install -dm755 "${pkgdir}/usr/share/fonts/${installdir}"
28 # Install fonts
29 local font
30 for font in "${fonts[@]}"; do
31 install -m644 "${font}" "${pkgdir}/usr/share/fonts/${installdir}"
32 install -Dm644 "${srcdir}/LICENSE" -t "${pkgdir}/usr/share/licenses/${ext}-${pkgbase}"
33 done
34}
35for _pkgname in "${pkgname[@]}"; do
36 eval "function package_${_pkgname}() { _package ${_pkgname}; }"
37done
38

Changes since previous scan

--- PKGBUILD @ 2026-06-20 00:18
+++ PKGBUILD @ 2026-11-03 00:04
@@ -4,7 +4,9 @@
pkgname=({otf,ttf,woff,woff2}-"${pkgbase}")
_fontname=AlimamaDongFangDaKai
pkgver=1.0
-pkgrel=5
+pkgrel=6
+# fonts.alibabadesign.com has enabled Referer anti-hotlinking; a Referer from the same domain is required to download files.
+DLAGENTS=('https::/usr/bin/curl -fLC - --referer https://fonts.alibabadesign.com/ -o %o %u')
pkgdesc="A typeface for creating alimama dongfangdakai viet in text.阿里妈妈东方大楷为中文简体字库,收纳的中文字符包括但不限于GB2312,共计6763个汉字"
arch=("any")
url="https://fonts.alibabagroup.com/#/more"
@@ -13,12 +15,12 @@
"${pkgbase}-${pkgver}.zip::https://fonts.alibabadesign.com/${_fontname}.zip"
"LICENSE"
)
-sha256sums=('e98f63d03cd3a9e98ed4a577a2113dbf932d5cd7faff74a0c3c596fbbaa654ce'
+sha256sums=('bb960f0f464a42c14ed215f4e1b4bde0b2e69bafe85be3e71ca1abf54c4ab553'
'abf3fdf5a6a4b50515c6fa5c92bcac6553ab6e8ac72869fba68e4a10b7603ac7')
function _package {
local _pkgname=$1
local ext="${_pkgname%%-*}"
- cd "${srcdir}/${_fontname}-Regular"
+ cd "${srcdir}"
local fonts=("${_fontname}-Regular.${ext}")
local installdir="${ext^^}"
# Prepare destination directory
@@ -33,3 +35,4 @@
for _pkgname in "${pkgname[@]}"; do
eval "function package_${_pkgname}() { _package ${_pkgname}; }"
done
+

Scan history

Scanned at (UTC)SeverityRules
2026-11-03 00:04:01 Medium 1
2026-06-20 00:18:46 Medium 1
2026-06-19 23:51:18 Clean 2
2026-06-19 19:07:35 Low 2
2026-06-18 16:11:54 Medium 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion