ttf-niek-fonts-win

CLEAN

maintainer tux_peng 0 votes scanned 2026-10-29 00:13:55.229276

View on AUR

Triggered rules

Clean AI review downgraded a static finding llm_review

The static rules flagged this LOW, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it CLEAN (confidence 95%): The package downloads a versioned release archive from the project's official GitHub repository, extracts font files and license documents, and installs them as system fonts; fonts and license texts are non-executable data, and the source is from the legitimate project owner's release infrastructure, posing no code execution or supply-chain risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: tux_peng <jpenguin@fastmail.com>
    
      2# Personal-use packaging recipe. Check per-font licenses before redistribution.
    
      3
    
      4pkgname=ttf-niek-fonts-win
    
      5pkgver=2.8
    
      6pkgrel=1
    
      7pkgdesc="Font collection from Niek's fonts-extractor (win) archive"
    
      8arch=('any')
    
      9url="https://github.com/Niek/fonts-extractor"
    
      10license=('custom:upstream-font-licenses')
    
      11depends=('fontconfig')
    
      12source=("fonts-win-$pkgver.zip::https://github.com/Niek/fonts-extractor/releases/download/v${pkgver}/fonts-win.zip")
    
      13noextract=("fonts-win-$pkgver.zip")
    
      14sha256sums=('8c43aa9938ebb50c4686949b128e1b1b3a2258891ab5faaf2aef081edf55ab0d')
    
      15
    
      16prepare() {
    
      17  mkdir -p archive
    
      18  bsdtar -xf "fonts-win-$pkgver.zip" -C archive
    
      19}
    
      20
    
      21package() {
    
      22  cd "$srcdir/archive"
    
      23  local font_dir="$pkgdir/usr/share/fonts/$pkgname"
    
      24
    
      25  # Fonts
    
      26  while IFS= read -r -d '' f; do
    
      27    install -Dm644 "$f" "$font_dir/$f"
    
      28  done < <(find . -type f \
    
      29    \( -iname '*.ttf' -o -iname '*.otf' -o -iname '*.ttc' -o -iname '*.otc' \) -print0)
    
      30
    
      31  # License/notice files
    
      32  while IFS= read -r -d '' f; do
    
      33    install -Dm644 "$f" "$pkgdir/usr/share/licenses/$pkgname/$f"
    
      34  done < <(find . -type f \
    
      35    \( -iname 'license*' -o -iname 'licence*' -o -iname 'copyright*' \
    
      36       -o -iname 'notice*' -o -iname 'readme*' \) -print0)
    
      37
    
      38  # Fail if the layout changed and nothing was installed
    
      39  if [[ -z $(find "$font_dir" -type f -print -quit 2>/dev/null) ]]; then
    
      40    echo "ERROR: no font files found in archive" >&2
    
      41    return 1
    
      42  fi
    
      43}
    
      44

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-29 00:13:55	Clean	2
2026-10-28 21:50:44	Low	1