win11fonts-auto
maintainer rev_enby
· 0 votes
· scanned 2026-08-18 00:03:42.021799
LOW
View on AUR ↗
Why flagged
Downloads a Windows 11 evaluation ISO directly from Microsoft's official static download infrastructure (software-static.download.prss.microsoft.com), extracts fonts (pure data, never executed), and installs them; the only concerns are a slightly malformed checksum and that this is a large ISO download, but there is no code execution risk or untrusted source.
Triggered rules
LOW
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 80%): Downloads a Windows 11 evaluation ISO directly from Microsoft's official static download infrastructure (software-static.download.prss.microsoft.com), extracts fonts (pure data, never executed), and installs them; the only concerns are a slightly malformed checksum and that this is a large ISO download, but there is no code execution risk or untrusted source.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:7
source=('https://software-static.download.prss.microsoft.com/dbazure/888969d5-f34g-4e03-ac9d-1f9786c66749/26100.1742.240906-0331.ge_release_svc_refresh_CLIENTENTERPRISEEVAL_OEMRET_x64FRE_en-us.iso')
PKGBUILD
1 offending line(s) highlighted
1
# maintainer: revectane <revectane@proton.me> irc: Revectane (irc.libera.chat)
2
pkgname=win11fonts-auto
3
pkgver=0.1
4
pkgrel=1
5
pkgdesc="replacement for broken ttf-ms-win10/11-fonts pkgs. saw this in a comment section of said pkgs and said why not make a pkgbuild."
6
arch=(any)
7
source=('https://software-static.download.prss.microsoft.com/dbazure/888969d5-f34g-4e03-ac9d-1f9786c66749/26100.1742.240906-0331.ge_release_svc_refresh_CLIENTENTERPRISEEVAL_OEMRET_x64FRE_en-us.iso')
8
sha256sums=('755a90d43e826a74b9e1932a34788b898e028272439b777e5593dee8d53622ae')
9
license=(custom)
10
depends=('7zip')
11
12
package() {
13
7z e "26100.1742.240906-0331.ge_release_svc_refresh_CLIENTENTERPRISEEVAL_OEMRET_x64FRE_en-us.iso" sources/install.wim
14
7z e install.wim Windows/{Fonts/"*".{ttf,ttc},System32/Licenses/neutral/"*"/"*"/license.rtf} -ofonts/
15
16
install -Dt "$pkgdir/usr/share/fonts/${pkgname%-fonts}" -m644 fonts/*.ttf fonts/*.ttc
17
install -Dm644 fonts/license.rtf -t "$pkgdir/usr/share/licenses/$pkgname"
18
}
19
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-18 00:03:42 | LOW | 3 |
| 2026-08-17 00:18:29 | LOW | 3 |
| 2026-08-16 00:03:42 | LOW | 3 |
| 2026-08-15 00:26:13 | LOW | 3 |
| 2026-08-14 01:28:48 | LOW | 3 |
| 2026-08-14 01:27:12 | MEDIUM | 3 |