woff2-alibabasans-puhuiti2-fonts

MEDIUM
maintainer zxp19821005 0 votes base alibabasans-puhuiti2-fonts scanned 2026-11-03 00:04:01.898975
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:13 "${pkgbase}-${pkgver}.zip::https://fonts.alibabadesign.com/${_fontname}.zip"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: zxp19821005 <zxp19821005 at 163 dot com>
2# PKGBUILD inspiration from fira-code
3pkgbase=alibabasans-puhuiti2-fonts
4pkgname=({eot,otf,ttf,woff,woff2}-"${pkgbase}")
5_fontname=AlibabaPuHuiTi-2
6pkgver=2.0
7pkgrel=5
8pkgdesc="A typeface for creating alibaba sans puhuiti2 in text.阿里巴巴普惠体简体中文(2.0),9字重"
9arch=("any")
10url="https://fonts.alibabagroup.com/#/font"
11license=("LicenseRef-custom")
12source=(
13 "${pkgbase}-${pkgver}.zip::https://fonts.alibabadesign.com/${_fontname}.zip"
14 "license.txt"
15)
16sha256sums=('9ad37e0756cd5383abde2757da65c8a4da934a2215a869267ec688c6ec2843c5'
17 '5fa72680af66db4f5c30c97fca7a8a6af31801d227675348a93b1c4126e61b61')
18function _package {
19 rm -rf "${srcdir}/${_fontname}/${_fontname}-35-Thin/${_fontname}-35-Thin.zip"
20 local _pkgname=$1
21 local ext="${_pkgname%%-*}"
22 for num in 105-Heavy 115-Black 35-Thin 45-Light 55-Regular 65-Medium 75-SemiBold 85-Bold 95-ExtraBold;do
23 cd "${srcdir}/${_fontname}/${_fontname}-${num}"
24 local fonts=("${_fontname}-${num}.${ext}")
25 local installdir="${ext^^}"
26 # Prepare destination directory
27 install -dm755 "${pkgdir}/usr/share/fonts/${installdir}"
28 # Install fonts
29 local font
30 for font in "${fonts[@]}"; do
31 install -m644 "${font}" "${pkgdir}/usr/share/fonts/${installdir}"
32 install -Dm644 "${srcdir}/license.txt" -t "${pkgdir}/usr/share/licenses/${ext}-${pkgbase}"
33 done
34 done
35}
36for _pkgname in "${pkgname[@]}"; do
37 eval "function package_${_pkgname}() { _package ${_pkgname}; }"
38done

Scan history

Scanned at (UTC)SeverityRules
2026-11-03 00:04:01 Medium 1
2026-06-20 00:18:46 Medium 1
2026-06-19 23:51:18 Clean 2
2026-06-19 19:07:35 Low 2
2026-06-18 16:11:54 Medium 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion