ttf-kreativekorp-commodore-berkelium

LOW

maintainer fbf-prog64 1 votes scanned 2026-10-25 03:43:22.088428

View on AUR

Why flagged

Downloads a font ZIP from kreativekorp.com (the project's own official domain) with a proper sha256 checksum; installs only TTF font files and a license text — pure non-executed data, no code execution risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 85%): Downloads a font ZIP from kreativekorp.com (the project's own official domain) with a proper sha256 checksum; installs only TTF font files and a license text — pure non-executed data, no code execution risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:17 'berkelium.zip::https://www.kreativekorp.com/swdownload/fonts/retro/berkelium.zip'

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Felipe BF <fprgw32 at gmail dot com>
    
      2
    
      3pkgname=ttf-kreativekorp-commodore-berkelium
    
      4pkgver=2011.02
    
      5pkgrel=2
    
      6pkgdesc="KreativeKorp's Commodore GEOS system font: Berkelium, based on BSW. Includes two variants: Berkelium 64 (menus and dialogs), and Berkelium 1541 (file icons)."
    
      7arch=('any')
    
      8url='https://www.kreativekorp.com/software/fonts/c64/'
    
      9license=('custom:relay-fonts-1.2f')
    
      10depends=('xorg-fonts-encodings')
    
      11
    
      12# Patch taken from 'ttf-petme'.
    
      13makedepends=('wget')
    
      14DLAGENTS=('https::/usr/bin/wget -O %o %u')
    
      15
    
      16source=(
    
      17    'berkelium.zip::https://www.kreativekorp.com/swdownload/fonts/retro/berkelium.zip'
    
      18)
    
      19sha256sums=(
    
      20    '6f120d32a240a272798134fb01ed954b51f9f8b1570f7788c9202080ec9749e2'
    
      21)
    
      22
    
      23package() {
    
      24    install -d "${pkgdir}/usr/share/fonts/${pkgbase}/"
    
      25    for f in $(find "${srcdir}" -type f -name 'Berkelium*.ttf'); do
    
      26        install -m644 "$f" "${pkgdir}/usr/share/fonts/${pkgbase}/"
    
      27    done
    
      28
    
      29    install -Dm644 "${srcdir}/FreeLicense.txt" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      30}
    
      31
    
      32

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-25 03:43:22	Low	3
2026-10-25 03:41:34	Medium	2