woff-alibabasans-puhuiti-fonts

MEDIUM

maintainer zxp19821005 0 votes base alibabasans-puhuiti-fonts scanned 2026-11-03 00:04:01.898975

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:13 "${pkgbase}-${pkgver}.zip::https://fonts.alibabadesign.com/${_zipname//-/}.zip"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: zxp19821005 <zxp19821005 at 163 dot com>
    
      2# PKGBUILD inspiration from fira-code
    
      3pkgbase=alibabasans-puhuiti-fonts
    
      4pkgname=({eot,otf,ttf,woff,woff2}-"${pkgbase}")
    
      5_zipname=Alibaba-PuHuiTi
    
      6pkgver=1.0
    
      7pkgrel=5
    
      8pkgdesc="A typeface for creating alibaba sans puhuiti in text.阿里巴巴普惠体简体中文,5字重"
    
      9arch=("any")
    
      10url="https://fonts.alibabagroup.com/#/font"
    
      11license=("LicenseRef-custom")
    
      12source=(
    
      13    "${pkgbase}-${pkgver}.zip::https://fonts.alibabadesign.com/${_zipname//-/}.zip"
    
      14    "license.txt"
    
      15)
    
      16sha256sums=('e6f9ad768c9c346d63982a9059268cd0788ef52bb63d50f31f0dc2bdae6d1002'
    
      17            'd8a5691d7a5a7542a379ab9a568a16ca5cd5506e758fb46789bb79b42cb5635a')
    
      18function _package {
    
      19    local _pkgname=$1
    
      20    local ext="${_pkgname%%-*}"
    
      21    for weight in Bold Heavy Light Medium Regular;do
    
      22        cd "${srcdir}/${_zipname//-/}/${_zipname}-${weight}"
    
      23        local fonts=("${_zipname}-${weight}.${ext}")
    
      24        local installdir="${ext^^}"
    
      25        # Prepare destination directory
    
      26        install -dm755 "${pkgdir}/usr/share/fonts/${installdir}"
    
      27        # Install fonts
    
      28        local font
    
      29            for font in "${fonts[@]}"; do
    
      30            install -m644 "${font}" "${pkgdir}/usr/share/fonts/${installdir}"
    
      31            install -Dm644 "${srcdir}/license.txt" -t "${pkgdir}/usr/share/licenses/${ext}-${pkgbase}"
    
      32        done
    
      33    done
    
      34}
    
      35for _pkgname in "${pkgname[@]}"; do
    
      36    eval "function package_${_pkgname}() { _package ${_pkgname}; }"
    
      37done

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-03 00:04:01	Medium	1
2026-06-19 23:51:18	Clean	2
2026-06-19 22:34:54	Medium	1