wps-office-kr-bin

MEDIUM

maintainer nahdd123 0 votes scanned 2026-11-02 02:02:07.595282

View on AUR

Why flagged

The package installs prebuilt binaries from a GitHub release hosted on a personal account with few votes and recent upload, creating a supply-chain risk if the source is compromised.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review of an ambiguous pattern llm_review

The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it MEDIUM (confidence 85%): The package installs prebuilt binaries from a GitHub release hosted on a personal account with few votes and recent upload, creating a supply-chain risk if the source is compromised.

PKGBUILD

      1# Maintainer: nahdd123 <nahdd123@gmail.com>
    
      2pkgname=wps-office-kr-bin
    
      3pkgver=12.1.2.29183
    
      4pkgrel=2
    
      5pkgdesc='WPS Office Korean-patched build (prebuilt binary from GitHub Releases)'
    
      6arch=('x86_64')
    
      7url='https://github.com/nahdd123uosackr/wps-office-kr'
    
      8license=('LicenseRef-WPS-EULA')
    
      9depends=('fontconfig' 'xorg-mkfontscale' 'libxrender' 'desktop-file-utils'
    
      10         'shared-mime-info' 'xdg-utils' 'glu' 'sdl2' 'libpulse'
    
      11         'hicolor-icon-theme' 'libxss' 'sqlite' 'libtool' 'libxslt' 'libjpeg-turbo')
    
      12optdepends=('cups: printing support'
    
      13            'pango: complex (right-to-left) text support'
    
      14            'ttf-wps-fonts: Symbol fonts required by WPS Office'
    
      15            'ttf-ms-fonts: Microsoft fonts recommended for WPS Office')
    
      16provides=('wps-office-kr' 'wps-office' 'wps-office-mime' 'wps-office-fonts')
    
      17conflicts=('wps-office-kr' 'wps-office' 'wps-office-365' 'wps-office-cn'
    
      18           'wps-office-mime' 'wps-office-fonts' 'kingsoft-office')
    
      19options=('!strip' '!debug' '!emptydirs')
    
      20install=wps-office-kr-bin.install
    
      21
    
      22_gh="https://github.com/nahdd123uosackr/wps-office-kr/releases/download/v${pkgver}"
    
      23_pkgs=(
    
      24  "wps-office-kr-${pkgver}-1-x86_64.pkg.tar.zst"
    
      25  "wps-office-kr-mime-${pkgver}-1-any.pkg.tar.zst"
    
      26  "wps-office-kr-fonts-${pkgver}-1-any.pkg.tar.zst"
    
      27)
    
      28
    
      29source=("${_pkgs[0]}::${_gh}/${_pkgs[0]}"
    
      30        "${_pkgs[1]}::${_gh}/${_pkgs[1]}"
    
      31        "${_pkgs[2]}::${_gh}/${_pkgs[2]}")
    
      32sha256sums=(
    
      33            '354a239a3a14a7afb40fd172bfeabd16785381865b1e56f540fcb9c5bd6e9960'
    
      34            'f2935c9ab05a92a24d8a0a5b798ac34a9e4c32b6582b29f533a46eb7563962e9'
    
      35            'ca0885c92c909e754aff37837af8f569ac2999360dc28227b5bc1349b14b9965')
    
      36
    
      37package() {
    
      38  # 미리 빌드된 pacman 패키지들을 그대로 풀어 재패키징한다.
    
      39  # .PKGINFO/.BUILDINFO/.MTREE/.INSTALL 은 메타데이터이므로 제외.
    
      40  local p
    
      41  for p in "${_pkgs[@]}"; do
    
      42    bsdtar -xf "${srcdir}/${p}" -C "${pkgdir}" \
    
      43      --exclude='.PKGINFO' --exclude='.BUILDINFO' --exclude='.MTREE' --exclude='.INSTALL'
    
      44  done
    
      45}
    
      46

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-02 02:02:07	Medium	2