ttf-niek-fonts-office

LOW

maintainer tux_peng 0 votes scanned 2026-10-29 00:13:55.229276

View on AUR

Why flagged

The package downloads a versioned release archive from a legitimate GitHub repository, extracts font files and license texts, and installs them; fonts are static assets that do not execute code, so even if the source were compromised, the risk is limited to data tampering, not remote code execution.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a versioned release archive from a legitimate GitHub repository, extracts font files and license texts, and installs them; fonts are static assets that do not execute code, so even if the source were compromised, the risk is limited to data tampering, not remote code execution.

PKGBUILD

      1# Maintainer: tux_peng <jpenguin@fastmail.com>
    
      2# Personal-use packaging recipe. Check per-font licenses before redistribution.
    
      3
    
      4pkgname=ttf-niek-fonts-office
    
      5pkgver=2.8
    
      6pkgrel=1
    
      7pkgdesc="Font collection from Niek's fonts-extractor (office) archive"
    
      8arch=('any')
    
      9url="https://github.com/Niek/fonts-extractor"
    
      10license=('custom:upstream-font-licenses')
    
      11depends=('fontconfig')
    
      12source=("fonts-office-$pkgver.zip::https://github.com/Niek/fonts-extractor/releases/download/v${pkgver}/fonts-office.zip")
    
      13noextract=("fonts-office-$pkgver.zip")
    
      14sha256sums=('cd8c1877f24996a1451686d4841a3b13f0445b7bd194484d6ad1b42af1720e16')
    
      15
    
      16prepare() {
    
      17  mkdir -p archive
    
      18  bsdtar -xf "fonts-office-$pkgver.zip" -C archive
    
      19}
    
      20
    
      21package() {
    
      22  cd "$srcdir/archive"
    
      23  local font_dir="$pkgdir/usr/share/fonts/$pkgname"
    
      24
    
      25  # Fonts
    
      26  while IFS= read -r -d '' f; do
    
      27    install -Dm644 "$f" "$font_dir/$f"
    
      28  done < <(find . -type f \
    
      29    \( -iname '*.ttf' -o -iname '*.otf' -o -iname '*.ttc' -o -iname '*.otc' \) -print0)
    
      30
    
      31  # License/notice files
    
      32  while IFS= read -r -d '' f; do
    
      33    install -Dm644 "$f" "$pkgdir/usr/share/licenses/$pkgname/$f"
    
      34  done < <(find . -type f \
    
      35    \( -iname 'license*' -o -iname 'licence*' -o -iname 'copyright*' \
    
      36       -o -iname 'notice*' -o -iname 'readme*' \) -print0)
    
      37
    
      38  # Fail if the layout changed and nothing was installed
    
      39  if [[ -z $(find "$font_dir" -type f -print -quit 2>/dev/null) ]]; then
    
      40    echo "ERROR: no font files found in archive" >&2
    
      41    return 1
    
      42  fi
    
      43}
    
      44

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-29 00:13:55	Low	2
2026-10-28 21:50:44	Low	2