woff2-alimama-agile

MEDIUM

maintainer zxp19821005 0 votes base alimama-agile scanned 2026-11-03 00:04:01.898975

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:15 "${pkgbase}-${pkgver}.zip::https://fonts.alibabadesign.com/${_fontname}.zip"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: zxp19821005 <zxp19821005 at 163 dot com>
    
      2# PKGBUILD inspiration from fira-code
    
      3pkgbase=alimama-agile
    
      4pkgname=({ttf,woff,woff2}-"${pkgbase}")
    
      5_fontname=AlimamaAgileVF
    
      6pkgver=1.0
    
      7pkgrel=5
    
      8# fonts.alibabadesign.com has enabled Referer anti-hotlinking; a Referer from the same domain is required to download files.
    
      9DLAGENTS=('https::/usr/bin/curl -fLC - --referer https://fonts.alibabadesign.com/ -o %o %u')
    
      10pkgdesc="A typeface for creating alimama agile viet in text.阿里妈妈灵动体——Alimama agile是一款西文四轴可变字体。这款字体包含了字重、字宽、倾斜、衬线四款可变方式，英文大小写共52个；常用标点符号共68个，总计120个字符。"
    
      11arch=("any")
    
      12url="https://fonts.alibabagroup.com/#/more"
    
      13license=("LicenseRef-custom")
    
      14source=(
    
      15    "${pkgbase}-${pkgver}.zip::https://fonts.alibabadesign.com/${_fontname}.zip"
    
      16    "LICENSE"
    
      17)
    
      18sha256sums=('4d3a6e3c0e958da623460f28e022bf23cd3401c96f59a08d7ef34123637a211f'
    
      19            'e3721ebffb491642f5dfbcecdedbcd4558c0f5ff2d051eba90d7b652975351bf')
    
      20function _package {
    
      21    local _pkgname=$1
    
      22    local ext="${_pkgname%%-*}"
    
      23    cd "${srcdir}"
    
      24    local fonts=("${_fontname}-Thin.${ext}")
    
      25    local installdir="${ext^^}"
    
      26    # Prepare destination directory
    
      27    install -dm755 "${pkgdir}/usr/share/fonts/${installdir}"
    
      28    # Install fonts
    
      29    local font
    
      30    for font in "${fonts[@]}"; do
    
      31        install -m644 "${font}" "${pkgdir}/usr/share/fonts/${installdir}"
    
      32        install -Dm644 "${srcdir}/LICENSE" -t "${pkgdir}/usr/share/licenses/${ext}-${pkgbase}"
    
      33    done
    
      34}
    
      35for _pkgname in "${pkgname[@]}"; do
    
      36    eval "function package_${_pkgname}() { _package ${_pkgname}; }"
    
      37done
    
      38

Changes since previous scan

--- PKGBUILD @ 2026-06-20 00:18
+++ PKGBUILD @ 2026-11-03 00:04
@@ -4,7 +4,9 @@
 pkgname=({ttf,woff,woff2}-"${pkgbase}")
 _fontname=AlimamaAgileVF
 pkgver=1.0
-pkgrel=4
+pkgrel=5
+# fonts.alibabadesign.com has enabled Referer anti-hotlinking; a Referer from the same domain is required to download files.
+DLAGENTS=('https::/usr/bin/curl -fLC - --referer https://fonts.alibabadesign.com/ -o %o %u')
 pkgdesc="A typeface for creating alimama agile viet in text.阿里妈妈灵动体——Alimama agile是一款西文四轴可变字体。这款字体包含了字重、字宽、倾斜、衬线四款可变方式，英文大小写共52个；常用标点符号共68个，总计120个字符。"
 arch=("any")
 url="https://fonts.alibabagroup.com/#/more"
@@ -13,12 +15,12 @@
     "${pkgbase}-${pkgver}.zip::https://fonts.alibabadesign.com/${_fontname}.zip"
     "LICENSE"
 )
-sha256sums=('16b618ba8c4fb3e23feca2fe2b9bdca653968f5a1c1c63aba2f98b831467c967'
+sha256sums=('4d3a6e3c0e958da623460f28e022bf23cd3401c96f59a08d7ef34123637a211f'
             'e3721ebffb491642f5dfbcecdedbcd4558c0f5ff2d051eba90d7b652975351bf')
 function _package {
     local _pkgname=$1
     local ext="${_pkgname%%-*}"
-    cd "${srcdir}/${_fontname}"
+    cd "${srcdir}"
     local fonts=("${_fontname}-Thin.${ext}")
     local installdir="${ext^^}"
     # Prepare destination directory
@@ -33,3 +35,4 @@
 for _pkgname in "${pkgname[@]}"; do
     eval "function package_${_pkgname}() { _package ${_pkgname}; }"
 done
+

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-03 00:04:01	Medium	1
2026-06-20 00:18:46	Medium	1
2026-06-19 23:51:18	Clean	2
2026-06-19 19:07:35	Low	2
2026-06-18 16:11:54	Medium	1