ttf-alimama-shuheiti

MEDIUM
maintainer taotieren 0 votes base alimama-shuheiti scanned 2026-10-27 05:46:44.858863
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:14 source=("$pkgbase-$pkgver.zip::https://fonts.alibabadesign.com/AlimamaShuHeiTi/AlimamaShuHeiTi-Bold.zip")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: taotieren <admin@taotieren.com>
2
3pkgbase=alimama-shuheiti
4pkgname=({ttf,otf,woff,woff2}-$pkgbase)
5pkgver=1.005
6pkgrel=1
7pkgdesc="阿里妈妈数黑体 AlimamaShuHeiTi"
8url="https://www.alibabafonts.com/#/more"
9makedepends=(libarchive)
10license=("LicenseRef-Custom")
11arch=(any)
12# fonts.alibabadesign.com has enabled Referer anti-hotlinking; a Referer from the same domain is required to download files.
13DLAGENTS=('https::/usr/bin/curl -fLC - --referer https://fonts.alibabadesign.com/ -o %o %u')
14source=("$pkgbase-$pkgver.zip::https://fonts.alibabadesign.com/AlimamaShuHeiTi/AlimamaShuHeiTi-Bold.zip")
15sha256sums=('fbb4b7f1ca5f3b60432a56c329da98e596388586413dcccddd97717a3b43cce4')
16
17package_ttf-alimama-shuheiti() {
18 pkgdesc+="(ttf)"
19 install -dm755 "$pkgdir/usr/share/fonts/TTF" \
20 "$pkgdir/usr/share/licenses/${pkgname}"
21
22 install -m644 ${srcdir}/AlimamaShuHeiTi*.ttf "$pkgdir/usr/share/fonts/TTF/"
23 install -m644 ${srcdir}/*.txt -t "$pkgdir/usr/share/licenses/${pkgname}/"
24}
25
26package_otf-alimama-shuheiti() {
27 pkgdesc+="(otf)"
28 install -dm755 "$pkgdir/usr/share/fonts/OTF" \
29 "$pkgdir/usr/share/licenses/${pkgname}"
30
31 install -m644 ${srcdir}/AlimamaShuHeiTi*.otf "$pkgdir/usr/share/fonts/OTF/"
32 install -m644 ${srcdir}/*.txt -t "$pkgdir/usr/share/licenses/${pkgname}/"
33}
34
35package_woff-alimama-shuheiti() {
36 pkgdesc+="(woff)"
37 install -dm755 "$pkgdir/usr/share/fonts/WOFF" \
38 "$pkgdir/usr/share/licenses/${pkgname}"
39
40 install -m644 ${srcdir}/AlimamaShuHeiTi*.woff "$pkgdir/usr/share/fonts/WOFF/"
41 install -m644 ${srcdir}/*.txt -t "$pkgdir/usr/share/licenses/${pkgname}/"
42}
43
44package_woff2-alimama-shuheiti() {
45 pkgdesc+="(woff2)"
46 install -dm755 "$pkgdir/usr/share/fonts/WOFF2" \
47 "$pkgdir/usr/share/licenses/${pkgname}"
48
49 install -m644 ${srcdir}/AlimamaShuHeiTi*.woff2 "$pkgdir/usr/share/fonts/WOFF2/"
50 install -m644 ${srcdir}/*.txt -t "$pkgdir/usr/share/licenses/${pkgname}/"
51}
52

Changes since previous scan

--- PKGBUILD @ 2026-10-27 03:46
+++ PKGBUILD @ 2026-10-27 05:46
@@ -2,24 +2,25 @@
pkgbase=alimama-shuheiti
pkgname=({ttf,otf,woff,woff2}-$pkgbase)
-pkgver=1.0.0
-pkgrel=4
+pkgver=1.005
+pkgrel=1
pkgdesc="阿里妈妈数黑体 AlimamaShuHeiTi"
url="https://www.alibabafonts.com/#/more"
makedepends=(libarchive)
license=("LicenseRef-Custom")
arch=(any)
+# fonts.alibabadesign.com has enabled Referer anti-hotlinking; a Referer from the same domain is required to download files.
+DLAGENTS=('https::/usr/bin/curl -fLC - --referer https://fonts.alibabadesign.com/ -o %o %u')
source=("$pkgbase-$pkgver.zip::https://fonts.alibabadesign.com/AlimamaShuHeiTi/AlimamaShuHeiTi-Bold.zip")
-sha256sums=('06f162d6802ab6e41b4f0e79abe90e084691ad480d5247d793f60167da4b9180')
+sha256sums=('fbb4b7f1ca5f3b60432a56c329da98e596388586413dcccddd97717a3b43cce4')
package_ttf-alimama-shuheiti() {
pkgdesc+="(ttf)"
install -dm755 "$pkgdir/usr/share/fonts/TTF" \
"$pkgdir/usr/share/licenses/${pkgname}"
- cd ${srcdir}/AlimamaShuHeiTi-bold
- install -m644 AlimamaShuHeiTi*.ttf "$pkgdir/usr/share/fonts/TTF/"
- install -m644 ${srcdir}/阿里妈妈数黑体版权声明.txt "$pkgdir/usr/share/licenses/${pkgname}/"
+ install -m644 ${srcdir}/AlimamaShuHeiTi*.ttf "$pkgdir/usr/share/fonts/TTF/"
+ install -m644 ${srcdir}/*.txt -t "$pkgdir/usr/share/licenses/${pkgname}/"
}
package_otf-alimama-shuheiti() {
@@ -27,9 +28,8 @@
install -dm755 "$pkgdir/usr/share/fonts/OTF" \
"$pkgdir/usr/share/licenses/${pkgname}"
- cd ${srcdir}/AlimamaShuHeiTi-bold
- install -m644 AlimamaShuHeiTi*.otf "$pkgdir/usr/share/fonts/OTF/"
- install -m644 ${srcdir}/阿里妈妈数黑体版权声明.txt "$pkgdir/usr/share/licenses/${pkgname}/"
+ install -m644 ${srcdir}/AlimamaShuHeiTi*.otf "$pkgdir/usr/share/fonts/OTF/"
+ install -m644 ${srcdir}/*.txt -t "$pkgdir/usr/share/licenses/${pkgname}/"
}
package_woff-alimama-shuheiti() {
@@ -37,9 +37,8 @@
install -dm755 "$pkgdir/usr/share/fonts/WOFF" \
"$pkgdir/usr/share/licenses/${pkgname}"
- cd ${srcdir}/AlimamaShuHeiTi-bold
- install -m644 AlimamaShuHeiTi*.woff "$pkgdir/usr/share/fonts/WOFF/"
- install -m644 ${srcdir}/阿里妈妈数黑体版权声明.txt "$pkgdir/usr/share/licenses/${pkgname}/"
+ install -m644 ${srcdir}/AlimamaShuHeiTi*.woff "$pkgdir/usr/share/fonts/WOFF/"
+ install -m644 ${srcdir}/*.txt -t "$pkgdir/usr/share/licenses/${pkgname}/"
}
package_woff2-alimama-shuheiti() {
@@ -47,8 +46,7 @@
install -dm755 "$pkgdir/usr/share/fonts/WOFF2" \
"$pkgdir/usr/share/licenses/${pkgname}"
- cd ${srcdir}/AlimamaShuHeiTi-bold
- install -m644 AlimamaShuHeiTi*.woff2 "$pkgdir/usr/share/fonts/WOFF2/"
- install -m644 ${srcdir}/阿里妈妈数黑体版权声明.txt "$pkgdir/usr/share/licenses/${pkgname}/"
+ install -m644 ${srcdir}/AlimamaShuHeiTi*.woff2 "$pkgdir/usr/share/fonts/WOFF2/"
+ install -m644 ${srcdir}/*.txt -t "$pkgdir/usr/share/licenses/${pkgname}/"
}

Scan history

Scanned at (UTC)SeverityRules
2026-10-27 05:46:44 Medium 1
2026-10-27 03:46:34 Medium 1
2026-06-19 19:07:35 Clean 2
2026-06-18 16:11:54 Medium 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion