woff-alibabasans-italic-fonts

MEDIUM

maintainer zxp19821005 0 votes base alibabasans-italic-fonts scanned 2026-11-03 00:04:01.898975

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:15 "${pkgbase}-${pkgver}.zip::https://fonts.alibabadesign.com/${_fontname}.zip"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: zxp19821005 <zxp19821005 at 163 dot com>
    
      2# PKGBUILD inspiration from fira-code
    
      3pkgbase=alibabasans-italic-fonts
    
      4pkgname=({eot,otf,ttf,woff,woff2}-"${pkgbase}")
    
      5_fontname=AlibabaSansItalics
    
      6pkgver=1.0
    
      7pkgrel=6
    
      8# fonts.alibabadesign.com has enabled Referer anti-hotlinking; a Referer from the same domain is required to download files.
    
      9DLAGENTS=('https::/usr/bin/curl -fLC - --referer https://fonts.alibabadesign.com/ -o %o %u')
    
      10pkgdesc="A typeface for creating alibaba sans italic in text.阿里巴巴普惠体拉丁斜体,172语种,5字重"
    
      11arch=("any")
    
      12url="https://fonts.alibabagroup.com/#/font"
    
      13license=("LicenseRef-custom")
    
      14source=(
    
      15    "${pkgbase}-${pkgver}.zip::https://fonts.alibabadesign.com/${_fontname}.zip"
    
      16    "license.txt"
    
      17)
    
      18sha256sums=('a6d7bfe17b7e04324edaa0872f513433255c8e8e5b8eece2fd78c15251ea1acb'
    
      19            '3c2a5fd682fd71bfc088c49e07015aaad3463dff7de1ceb385c55c042ffa0467')
    
      20function _package {
    
      21    local _pkgname=$1
    
      22    local ext="${_pkgname%%-*}"
    
      23    for _weight in BoldItalic HeavyItalic Italic LightItalic MediumItalic;do
    
      24        cd "${srcdir}/${_fontname}/AlibabaSans-${_weight}"
    
      25        local fonts=("AlibabaSans-${_weight}.${ext}")
    
      26        local installdir="${ext^^}"
    
      27        # Prepare destination directory
    
      28        install -dm755 "${pkgdir}/usr/share/fonts/${installdir}"
    
      29        # Install fonts
    
      30        local font
    
      31            for font in "${fonts[@]}"; do
    
      32            install -m644 "${font}" "${pkgdir}/usr/share/fonts/${installdir}"
    
      33            install -Dm644 "${srcdir}/license.txt" -t "${pkgdir}/usr/share/licenses/${ext}-${pkgbase}"
    
      34        done
    
      35    done
    
      36}
    
      37for _pkgname in "${pkgname[@]}"; do
    
      38    eval "function package_${_pkgname}() { _package ${_pkgname}; }"
    
      39done
    
      40

Changes since previous scan

--- PKGBUILD @ 2026-06-20 00:18
+++ PKGBUILD @ 2026-11-03 00:04
@@ -4,7 +4,9 @@
 pkgname=({eot,otf,ttf,woff,woff2}-"${pkgbase}")
 _fontname=AlibabaSansItalics
 pkgver=1.0
-pkgrel=5
+pkgrel=6
+# fonts.alibabadesign.com has enabled Referer anti-hotlinking; a Referer from the same domain is required to download files.
+DLAGENTS=('https::/usr/bin/curl -fLC - --referer https://fonts.alibabadesign.com/ -o %o %u')
 pkgdesc="A typeface for creating alibaba sans italic in text.阿里巴巴普惠体拉丁斜体,172语种,5字重"
 arch=("any")
 url="https://fonts.alibabagroup.com/#/font"
@@ -35,3 +37,4 @@
 for _pkgname in "${pkgname[@]}"; do
     eval "function package_${_pkgname}() { _package ${_pkgname}; }"
 done
+

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-03 00:04:01	Medium	1
2026-06-20 00:18:46	Medium	1
2026-06-19 23:51:18	Clean	2
2026-06-19 19:07:35	Low	2
2026-06-18 16:11:54	Medium	1