win11fonts-auto

maintainer rev_enby · 0 votes · scanned 2026-08-18 00:03:42.021799
LOW
View on AUR ↗
Why flagged Downloads a Windows 11 evaluation ISO directly from Microsoft's official static download infrastructure (software-static.download.prss.microsoft.com), extracts fonts (pure data, never executed), and installs them; the only concerns are a slightly malformed checksum and that this is a large ISO download, but there is no code execution risk or untrusted source.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 80%): Downloads a Windows 11 evaluation ISO directly from Microsoft's official static download infrastructure (software-static.download.prss.microsoft.com), extracts fonts (pure data, never executed), and installs them; the only concerns are a slightly malformed checksum and that this is a large ISO download, but there is no code execution risk or untrusted source.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:7 source=('https://software-static.download.prss.microsoft.com/dbazure/888969d5-f34g-4e03-ac9d-1f9786c66749/26100.1742.240906-0331.ge_release_svc_refresh_CLIENTENTERPRISEEVAL_OEMRET_x64FRE_en-us.iso')

PKGBUILD

1 offending line(s) highlighted
1# maintainer: revectane <revectane@proton.me> irc: Revectane (irc.libera.chat)
2pkgname=win11fonts-auto
3pkgver=0.1
4pkgrel=1
5pkgdesc="replacement for broken ttf-ms-win10/11-fonts pkgs. saw this in a comment section of said pkgs and said why not make a pkgbuild."
6arch=(any)
7source=('https://software-static.download.prss.microsoft.com/dbazure/888969d5-f34g-4e03-ac9d-1f9786c66749/26100.1742.240906-0331.ge_release_svc_refresh_CLIENTENTERPRISEEVAL_OEMRET_x64FRE_en-us.iso')
8sha256sums=('755a90d43e826a74b9e1932a34788b898e028272439b777e5593dee8d53622ae')
9license=(custom)
10depends=('7zip')
11
12package() {
13 7z e "26100.1742.240906-0331.ge_release_svc_refresh_CLIENTENTERPRISEEVAL_OEMRET_x64FRE_en-us.iso" sources/install.wim
14 7z e install.wim Windows/{Fonts/"*".{ttf,ttc},System32/Licenses/neutral/"*"/"*"/license.rtf} -ofonts/
15
16 install -Dt "$pkgdir/usr/share/fonts/${pkgname%-fonts}" -m644 fonts/*.ttf fonts/*.ttc
17 install -Dm644 fonts/license.rtf -t "$pkgdir/usr/share/licenses/$pkgname"
18}
19

Scan history

Scanned at (UTC)SeverityRules
2026-08-18 00:03:42 LOW 3
2026-08-17 00:18:29 LOW 3
2026-08-16 00:03:42 LOW 3
2026-08-15 00:26:13 LOW 3
2026-08-14 01:28:48 LOW 3
2026-08-14 01:27:12 MEDIUM 3

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion