ttf-moe-fonts
LOW
maintainer xatierlike
0 votes
scanned 2026-10-04 00:18:08.092502
Why flagged
The package downloads font files from the official Taiwan Ministry of Education website;虽 host not whitelisted,但 source is legitimate and fonts are non-executable data.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads font files from the official Taiwan Ministry of Education website;虽 host not whitelisted,但 source is legitimate and fonts are non-executable data.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:15
"https://language.moe.gov.tw/001/Upload/Files/site_content/M0001/edukai-5.1.zip"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: xatier
2
3
pkgname=ttf-moe-fonts
4
pkgver=1
5
pkgrel=1
6
pkgdesc='National standard fonts from Taiwan Ministry of Education'
7
arch=('any')
8
url='https://language.moe.gov.tw/material/list?u=9fd3b76d-d663-4508-bad1-a61d34e68850&category=71&page=1'
9
license=('CC-BY-ND-4.0')
10
11
# Kai: https://language.moe.gov.tw/material/info?m=9fe3fe82-8bbf-44c0-961d-873ea079e284
12
# Song: https://language.moe.gov.tw/material/info?m=9fe3fc3b-7fb3-4692-b6f0-7fe176d86ccb
13
# Li: https://language.moe.gov.tw/material/info?m=9fe3fb11-c3d5-41f2-b029-6d18a2c2fd0d
14
source=(
15
"https://language.moe.gov.tw/001/Upload/Files/site_content/M0001/edukai-5.1.zip"
16
"https://language.moe.gov.tw/001/Upload/Files/site_content/M0001/eduSong_Unicode.zip"
17
"https://language.moe.gov.tw/001/Upload/Files/site_content/M0001/MoeLI-3.0.zip"
18
)
19
20
sha256sums=(
21
"0cc23456a8bbf639133ee88da7430a9dfe8519ba1f8e4e4b6dce1ab4180435cb"
22
"59ae90ddb92aa82dc94f2e731270ae421ee13368ddc2d07d14e0719f2acf60e3"
23
"fd7e633ed8cebc94d46e2295e6bd9d58814be5fb7489e99dc23f99b7e435dce0"
24
)
25
26
package() {
27
install -d "${pkgdir}/usr/share/fonts/TTF"
28
mv 'MoeLI(隸書3.0版1080724上網).ttf' MoeLI.ttf
29
mv edukai-5.1_20251208.ttf edukai-5.1.ttf
30
31
for font in edukai-5.1 edusong_Unicode 'MoeLI'; do
32
install -Dm644 "${srcdir}/${font}.ttf" "${pkgdir}/usr/share/fonts/TTF/${font}.ttf"
33
done
34
}
35
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-04 00:18:08 | Low | 2 |
| 2026-10-03 00:23:04 | Low | 2 |
| 2026-10-02 00:00:32 | Low | 2 |
| 2026-10-01 00:02:06 | Low | 2 |
| 2026-09-30 00:20:07 | Low | 2 |
| 2026-09-29 00:07:46 | Low | 2 |
| 2026-09-28 00:28:32 | Low | 2 |
| 2026-09-27 00:07:07 | Low | 2 |
| 2026-09-26 00:12:15 | Low | 2 |
| 2026-09-25 00:03:36 | Low | 2 |
| 2026-09-24 00:24:14 | Low | 2 |
| 2026-09-23 00:28:13 | Low | 2 |
| 2026-09-22 00:15:14 | Low | 2 |
| 2026-09-21 00:26:32 | Low | 2 |
| 2026-09-20 00:25:31 | Low | 2 |
| 2026-09-19 00:25:36 | Low | 2 |
| 2026-09-18 00:17:11 | Low | 2 |
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |