yozo-office-fonts
MEDIUM
maintainer zxp19821005
13 votes
base
yozo-office
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads a prebuilt .deb from a non-standard host (dl.yozosoft.com) which is not on the whitelist; while likely the official vendor, the unverifiable nature of a binary artifact from a non-standard domain poses a moderate supply-chain risk if the host were compromised or spoofed.
Triggered rules
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:25
source=("${pkgbase}-${pkgver}.deb::https://dl.yozosoft.com/yozo/project/file/${_relver}/${pkgbase}_${pkgver}_amd64.deb")
Medium
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-07-25) reviewed this and agrees it is MEDIUM (confidence 90%): The package downloads a prebuilt .deb from a non-standard host (dl.yozosoft.com) which is not on the whitelist; while likely the official vendor, the unverifiable nature of a binary artifact from a non-standard domain poses a moderate supply-chain risk if the host were compromised or spoofed.
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: zxp19821005 <zxp19821005 at 163 dot com>
2
# Contributor: WhriedPlanck
3
# Contributor: Felix Golatofski <contact@xdfr.de>
4
# Contributor: h0cheung <unknow>
5
# Contributor: WhiredPlanck <unknow>
6
# Contributor: heavysink <unknow>
7
pkgbase=yozo-office
8
_pkgname=Yozo_Office
9
pkgname=(
10
"${pkgbase}"
11
"${pkgbase}-fonts"
12
"${pkgbase}-templates"
13
)
14
pkgver=9.0.6589.141ZH.S1
15
_relver=20251224_134417_869690
16
pkgrel=1
17
pkgdesc="Yozo Office 2024 - An MS Office compatible office suite"
18
url="https://www.yozosoft.com/product-officelinux.html"
19
options=(
20
'!strip'
21
)
22
install=yozo-office.install
23
license=('LicenseRef-custom')
24
arch=('x86_64')
25
source=("${pkgbase}-${pkgver}.deb::https://dl.yozosoft.com/yozo/project/file/${_relver}/${pkgbase}_${pkgver}_amd64.deb")
26
sha256sums=('495375f2d122fb362ca7deb971f800a6090993deb77dbb4ae86624dcae098567')
27
prepare() {
28
cd "${srcdir}"
29
# Extracting data.tar.xz ...
30
bsdtar -xf "${srcdir}/data."*
31
# Fixing directory permissions ...
32
find "${srcdir}" -type d -exec chmod -v 755 {} +
33
# Removing unnecessary files ...
34
rm -rf "${srcdir}/etc/"{xdg,yozoXpack}
35
rm -rf "${srcdir}/opt/apps/${_pkgname}/"{Upgrade,uninstall}
36
rm -rf "${srcdir}/usr/share/applications/yozo-uninstall.desktop"
37
}
38
package_yozo-office() {
39
depends=(
40
'freetype2'
41
'sane'
42
'libvlc'
43
'libxt'
44
'libsm'
45
'libxkbcommon'
46
'alsa-lib'
47
'libglvnd'
48
'libwebp'
49
'gtk3'
50
'mesa'
51
'libmng'
52
'nspr'
53
'twolame'
54
'libice'
55
'nss'
56
'libtiff5'
57
'sdl12-compat'
58
'lsof'
59
)
60
optdepends=(
61
"${pkgbase}-fonts: built-in fonts"
62
"${pkgbase}-templates: built-in document templates"
63
)
64
# Installing main binaries ...
65
cp -a "${srcdir}"/{usr,opt,etc} "${pkgdir}"
66
rm -rf "${pkgdir}/usr/share/fonts"
67
rm -rf "${pkgdir}/opt/apps/${_pkgname}/Templates"
68
# Fixing permissions of binaries in /usr/bin ...
69
find "${pkgdir}/usr/bin" -type f -exec chmod -v 755 {} +
70
# Replacing libfreetype.so.6 with system's to adapt for harfbuzz 5.x
71
#rm -rf "${pkgdir}/opt/Yozosoft/${_pkgname}/Jre/lib/amd64/libfreetype.so.6"
72
#ln -sf "/usr/lib/libfreetype.so.6" "${pkgdir}/opt/Yozosoft/${_pkgname}/Jre/lib/amd64/libfreetype.so.6"
73
# Installing licenses of thirdparties ...
74
install -Dm644 "${srcdir}/opt/apps/${_pkgname}/thirdpartylicensereadme.txt" -t "${pkgdir}/usr/share/licenses/${pkgname}"
75
}
76
package_yozo-office-fonts() {
77
pkgdesc="Built-in fonts of Yozo Office 2024"
78
# Installing built-in fonts of Yozo Office 2024 ...
79
install -Dm644 "${srcdir}/usr/share/fonts/truetype/yozo/"* -t "${pkgdir}/usr/share/fonts/truetype/yozo"
80
install -Dm644 "${srcdir}/opt/apps/${_pkgname}/thirdpartylicensereadme.txt" -t "${pkgdir}/usr/share/licenses/${pkgname}"
81
}
82
package_yozo-office-templates() {
83
pkgdesc="Built-in document templates of Yozo Office 2024"
84
# Installing built-in document templates of Yozo Office 2024 ...
85
install -Dm755 -d "${pkgdir}/opt/Yozosoft/${_pkgname}"
86
cp -a "${srcdir}/opt/apps/${_pkgname}/Templates" "${pkgdir}/opt/Yozosoft/${_pkgname}"
87
install -Dm644 "${srcdir}/opt/apps/${_pkgname}/thirdpartylicensereadme.txt" -t "${pkgdir}/usr/share/licenses/${pkgname}"
88
}
89
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Medium | 2 |
| 2026-09-16 00:03:17 | Medium | 2 |
| 2026-09-15 00:25:31 | Medium | 2 |
| 2026-09-14 00:27:57 | Medium | 2 |
| 2026-09-13 00:19:54 | Medium | 2 |
| 2026-09-12 00:25:17 | Medium | 2 |
| 2026-09-11 00:19:22 | Medium | 2 |
| 2026-09-10 00:22:44 | Medium | 2 |
| 2026-09-09 00:04:09 | Medium | 2 |
| 2026-09-08 00:18:08 | Medium | 2 |
| 2026-09-07 00:30:15 | Medium | 2 |
| 2026-09-06 00:17:06 | Medium | 2 |
| 2026-09-05 00:16:27 | Medium | 2 |
| 2026-09-04 00:03:13 | Medium | 2 |
| 2026-09-03 00:15:47 | Medium | 2 |
| 2026-09-02 00:02:31 | Medium | 2 |
| 2026-09-01 00:11:19 | Medium | 2 |
| 2026-08-31 00:19:57 | Medium | 2 |
| 2026-08-30 00:04:14 | Medium | 2 |
| 2026-08-29 00:29:17 | Medium | 2 |