ttf-niek-fonts-mac

LOW

maintainer tux_peng 0 votes scanned 2026-10-29 00:13:55.229276

View on AUR

Why flagged

The package downloads a versioned release archive from a legitimate GitHub repository, extracts font files and license documents, and installs them; fonts are static data assets that cannot execute code, so even if the source were compromised, the worst-case impact is limited to data tampering, not remote code execution or system compromise.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a versioned release archive from a legitimate GitHub repository, extracts font files and license documents, and installs them; fonts are static data assets that cannot execute code, so even if the source were compromised, the worst-case impact is limited to data tampering, not remote code execution or system compromise.

PKGBUILD

      1# Maintainer: tux_peng <jpenguin@fastmail.com>
    
      2# Personal-use packaging recipe. Check per-font licenses before redistribution.
    
      3
    
      4pkgname=ttf-niek-fonts-mac
    
      5pkgver=2.8
    
      6pkgrel=1
    
      7pkgdesc="Font collection from Niek's fonts-extractor (mac) archive"
    
      8arch=('any')
    
      9url="https://github.com/Niek/fonts-extractor"
    
      10license=('custom:upstream-font-licenses')
    
      11depends=('fontconfig')
    
      12source=("fonts-mac-$pkgver.zip::https://github.com/Niek/fonts-extractor/releases/download/v${pkgver}/fonts-mac.zip")
    
      13noextract=("fonts-mac-$pkgver.zip")
    
      14sha256sums=('6ae7ff7cfef557675108b7447fab8848497dbadc7a788909feeba234be3701aa')
    
      15
    
      16prepare() {
    
      17  mkdir -p archive
    
      18  bsdtar -xf "fonts-mac-$pkgver.zip" -C archive
    
      19}
    
      20
    
      21package() {
    
      22  cd "$srcdir/archive"
    
      23  local font_dir="$pkgdir/usr/share/fonts/$pkgname"
    
      24
    
      25  # Fonts
    
      26  while IFS= read -r -d '' f; do
    
      27    install -Dm644 "$f" "$font_dir/$f"
    
      28  done < <(find . -type f \
    
      29    \( -iname '*.ttf' -o -iname '*.otf' -o -iname '*.ttc' -o -iname '*.otc' \) -print0)
    
      30
    
      31  # License/notice files
    
      32  while IFS= read -r -d '' f; do
    
      33    install -Dm644 "$f" "$pkgdir/usr/share/licenses/$pkgname/$f"
    
      34  done < <(find . -type f \
    
      35    \( -iname 'license*' -o -iname 'licence*' -o -iname 'copyright*' \
    
      36       -o -iname 'notice*' -o -iname 'readme*' \) -print0)
    
      37
    
      38  # Fail if the layout changed and nothing was installed
    
      39  if [[ -z $(find "$font_dir" -type f -print -quit 2>/dev/null) ]]; then
    
      40    echo "ERROR: no font files found in archive" >&2
    
      41    return 1
    
      42  fi
    
      43}
    
      44

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-29 00:13:55	Low	2
2026-10-28 21:50:44	Low	2