ttf-kreativekorp-apple2-dummy

LOW

maintainer fbf-prog64 1 votes base ttf-kreativekorp-apple2 scanned 2026-10-25 03:43:22.088428

View on AUR

Why flagged

Downloads a font ZIP from kreativekorp.com (the project's own official domain per the url= field), installs only TTF font files and a license text — pure non-executed data — with a proper sha256 checksum; the non-whitelisted host is simply the project's own site.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 85%): Downloads a font ZIP from kreativekorp.com (the project's own official domain per the url= field), installs only TTF font files and a license text — pure non-executed data — with a proper sha256 checksum; the non-whitelisted host is simply the project's own site.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:18 'bload.zip::https://www.kreativekorp.com/swdownload/fonts/retro/bload.zip'

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Felipe BF <fprgw32 at gmail dot com>
    
      2
    
      3pkgbase=ttf-kreativekorp-apple2
    
      4pkgname=('ttf-kreativekorp-apple2-bload')
    
      5pkgver=2020.04
    
      6pkgrel=5
    
      7pkgdesc="KreativeKorp's Apple II-themed font bundle: BLoad, with its respective variations."
    
      8arch=('any')
    
      9url='https://www.kreativekorp.com/software/fonts/apple2/'
    
      10license=('custom:relay-fonts-1.2f')
    
      11depends=('xorg-fonts-encodings')
    
      12
    
      13# Patch taken from 'ttf-petme'.
    
      14makedepends=('wget')
    
      15DLAGENTS=('https::/usr/bin/wget -O %o %u')
    
      16
    
      17source=(
    
      18    'bload.zip::https://www.kreativekorp.com/swdownload/fonts/retro/bload.zip'
    
      19)
    
      20sha256sums=(
    
      21    '0d87ff9408e7172038fe88a6ce3128af8cb716d5bce4a92cf7a33cd9b7458dd4'
    
      22)
    
      23
    
      24package_ttf-kreativekorp-apple2-bload() {
    
      25    pkgdesc="KreativeKorp's Apple II standard bit patterns fonts: BLoad A1024 (lo-res graphics), and BLoad A8192 (hi-res graphics)."
    
      26
    
      27    install -d "${pkgdir}/usr/share/fonts/${pkgbase}/"
    
      28    for f in $(find "${srcdir}" -type f -name 'BLoad*.ttf'); do
    
      29        install -m644 "$f" "${pkgdir}/usr/share/fonts/${pkgbase}/"
    
      30    done
    
      31
    
      32    install -Dm644 "${srcdir}/FreeLicense.txt" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      33}
    
      34
    
      35

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-25 03:43:22	Low	3
2026-10-25 03:41:34	Medium	2