ttf-tw-edu-kai
maintainer adamanteye
· 0 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The source is a font file from an official government domain, which is safe to install as non-executable data, despite the non-whitelisted host and unverified checksum.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a font file from an official government domain, which is safe to install as non-executable data, despite the non-whitelisted host and unverified checksum.
2 higher static findings superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:10
source=("https://language.moe.gov.tw/uploads/files/17694979891080.zip")
MEDIUM
Recently orphaned & re-adopted
orphaned_readopted
This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Xuelin Yang <xuelin@adamanteye.cc>
2
# Contributor: CToID <funk443@yahoo.com.tw>
3
pkgname=ttf-tw-edu-kai
4
pkgver=5.1
5
pkgrel=1
6
pkgdesc='The regular script style (aka kai style) font for Tradtional Chinese.'
7
arch=('any')
8
url='https://language.moe.gov.tw/material/info?m=9fe3fe82-8bbf-44c0-961d-873ea079e284'
9
license=('CC-BY-ND-4.0')
10
source=("https://language.moe.gov.tw/uploads/files/17694979891080.zip")
11
sha256sums=('0cc23456a8bbf639133ee88da7430a9dfe8519ba1f8e4e4b6dce1ab4180435cb')
12
13
package() {
14
install -d ${pkgdir}/usr/share/fonts/TTF/
15
install -m644 edukai*.ttf ${pkgdir}/usr/share/fonts/TTF/edukai.ttf
16
}
17
Changes since previous scan
--- PKGBUILD @ 2026-06-19 19:07+++ PKGBUILD @ 2026-08-03 00:08@@ -1,16 +1,17 @@-# Maintainer: CToID <funk443@yahoo.com.tw>+# Maintainer: Xuelin Yang <xuelin@adamanteye.cc>+# Contributor: CToID <funk443@yahoo.com.tw> pkgname=ttf-tw-edu-kai-pkgver=5.0+pkgver=5.1 pkgrel=1 pkgdesc='The regular script style (aka kai style) font for Tradtional Chinese.' arch=('any')-url='https://language.moe.gov.tw/result.aspx?classify_sn=23&subclassify_sn=436&content_sn=47'+url='https://language.moe.gov.tw/material/info?m=9fe3fe82-8bbf-44c0-961d-873ea079e284' license=('CC-BY-ND-4.0')-source=("https://language.moe.gov.tw/001/Upload/Files/site_content/M0001/edukai-${pkgver}.zip")-sha256sums=('57411e9ca399f372bda62fadd521a875d2062d34a0c654ace4a4c61539f3e10b')+source=("https://language.moe.gov.tw/uploads/files/17694979891080.zip")+sha256sums=('0cc23456a8bbf639133ee88da7430a9dfe8519ba1f8e4e4b6dce1ab4180435cb') package() { install -d ${pkgdir}/usr/share/fonts/TTF/- install -m644 *.ttf ${pkgdir}/usr/share/fonts/TTF/+ install -m644 edukai*.ttf ${pkgdir}/usr/share/fonts/TTF/edukai.ttf } Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 3 |
| 2026-08-02 00:16:08 | LOW | 3 |
| 2026-08-01 00:11:18 | LOW | 3 |
| 2026-07-31 00:14:10 | LOW | 3 |
| 2026-07-30 00:17:23 | LOW | 3 |
| 2026-07-29 00:25:53 | LOW | 3 |
| 2026-07-28 00:07:28 | LOW | 3 |
| 2026-07-27 00:24:32 | LOW | 3 |
| 2026-07-26 00:07:32 | LOW | 3 |
| 2026-07-25 00:13:44 | LOW | 3 |
| 2026-07-24 00:02:28 | LOW | 3 |
| 2026-07-23 00:14:47 | LOW | 3 |
| 2026-07-22 00:29:32 | LOW | 3 |
| 2026-07-21 00:24:15 | LOW | 3 |
| 2026-07-20 00:19:49 | LOW | 3 |
| 2026-07-19 13:11:02 | MEDIUM | 2 |
| 2026-06-19 19:07:35 | CLEAN | 2 |
| 2026-06-19 18:54:17 | CLEAN | 2 |
| 2026-06-18 16:11:54 | MEDIUM | 1 |