woff-alimama-fangyuanti

MEDIUM

maintainer zxp19821005 0 votes base alimama-fangyuanti scanned 2026-11-03 00:04:01.898975

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:15 "${pkgbase}-${pkgver}.zip::https://fonts.alibabadesign.com/${_fontname}.zip"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: zxp19821005 <zxp19821005 at 163 dot com>
    
      2# PKGBUILD inspiration from fira-code
    
      3pkgbase=alimama-fangyuanti
    
      4pkgname=({ttf,woff,woff2}-"${pkgbase}")
    
      5_fontname=AlimamaFangYuanTiVF
    
      6pkgver=1.0
    
      7pkgrel=4
    
      8# fonts.alibabadesign.com has enabled Referer anti-hotlinking; a Referer from the same domain is required to download files.
    
      9DLAGENTS=('https::/usr/bin/curl -fLC - --referer https://fonts.alibabadesign.com/ -o %o %u')
    
      10pkgdesc="A typeface for creating alimama fangyuanti viet in text.阿里妈妈方圆体是阿里妈妈·智造字通过智能AI的方式完成的一款简体中文双轴可变字体。收纳的中文字符包括但不限于GB2312，共计6763个汉字；英文大小写共52个；常用标点符号共227个，总计7042个字符"
    
      11arch=("any")
    
      12url="https://fonts.alibabagroup.com/#/more"
    
      13license=("LicenseRef-custom")
    
      14source=(
    
      15    "${pkgbase}-${pkgver}.zip::https://fonts.alibabadesign.com/${_fontname}.zip"
    
      16    "LICENSE"
    
      17)
    
      18sha256sums=('e6c31699db303696b6d99a38646b1a04af616fb756f45c686283f12fe70ba176'
    
      19            '475e9f306ddb72deefd4aa3f0b0d1c48c0dda0484309f8dffbc39143ddfd22ac')
    
      20function _package {
    
      21    local _pkgname=$1
    
      22    local ext="${_pkgname%%-*}"
    
      23    cd "${srcdir}"
    
      24    local fonts=("${_fontname}-Thin.${ext}")
    
      25    local installdir="${ext^^}"
    
      26    # Prepare destination directory
    
      27    install -dm755 "${pkgdir}/usr/share/fonts/${installdir}"
    
      28    # Install fonts
    
      29    local font
    
      30    for font in "${fonts[@]}"; do
    
      31        install -m644 "${font}" "${pkgdir}/usr/share/fonts/${installdir}"
    
      32        install -Dm644 "${srcdir}/LICENSE" -t "${pkgdir}/usr/share/licenses/${ext}-${pkgbase}"
    
      33    done
    
      34}
    
      35for _pkgname in "${pkgname[@]}"; do
    
      36    eval "function package_${_pkgname}() { _package ${_pkgname}; }"
    
      37done
    
      38

Changes since previous scan

--- PKGBUILD @ 2026-06-20 00:18
+++ PKGBUILD @ 2026-11-03 00:04
@@ -4,7 +4,9 @@
 pkgname=({ttf,woff,woff2}-"${pkgbase}")
 _fontname=AlimamaFangYuanTiVF
 pkgver=1.0
-pkgrel=3
+pkgrel=4
+# fonts.alibabadesign.com has enabled Referer anti-hotlinking; a Referer from the same domain is required to download files.
+DLAGENTS=('https::/usr/bin/curl -fLC - --referer https://fonts.alibabadesign.com/ -o %o %u')
 pkgdesc="A typeface for creating alimama fangyuanti viet in text.阿里妈妈方圆体是阿里妈妈·智造字通过智能AI的方式完成的一款简体中文双轴可变字体。收纳的中文字符包括但不限于GB2312，共计6763个汉字；英文大小写共52个；常用标点符号共227个，总计7042个字符"
 arch=("any")
 url="https://fonts.alibabagroup.com/#/more"
@@ -13,12 +15,12 @@
     "${pkgbase}-${pkgver}.zip::https://fonts.alibabadesign.com/${_fontname}.zip"
     "LICENSE"
 )
-sha256sums=('308697da830c69a916b604098c1b6533b826a8a0e4bdd88bc39fa17edd049d2b'
+sha256sums=('e6c31699db303696b6d99a38646b1a04af616fb756f45c686283f12fe70ba176'
             '475e9f306ddb72deefd4aa3f0b0d1c48c0dda0484309f8dffbc39143ddfd22ac')
 function _package {
     local _pkgname=$1
     local ext="${_pkgname%%-*}"
-    cd "${srcdir}/${_fontname}"
+    cd "${srcdir}"
     local fonts=("${_fontname}-Thin.${ext}")
     local installdir="${ext^^}"
     # Prepare destination directory
@@ -33,3 +35,4 @@
 for _pkgname in "${pkgname[@]}"; do
     eval "function package_${_pkgname}() { _package ${_pkgname}; }"
 done
+

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-03 00:04:01	Medium	1
2026-06-20 00:18:46	Medium	1
2026-06-19 23:51:18	Clean	2
2026-06-19 19:07:35	Low	2
2026-06-18 16:11:54	Medium	1