lmstudio-beta

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

• PKGBUILD:19 source=("$filename::https://installers.lmstudio.ai/linux/x64/${pkgver}-1/LM-Studio-${pkgver}-1-x64.deb")

An AI model (anthropic/claude-4.6-sonnet-20260217) reviewed this and agrees it is MEDIUM (confidence 72%): This PKGBUILD downloads a prebuilt binary .deb from installers.lmstudio.ai, which is the official LM Studio distribution host (lmstudio.ai is the vendor's domain, and installers.lmstudio.ai is their CDN/installer endpoint). The sha256 checksum is pinned. The pattern is identical to many legitimate proprietary software AUR packages (e.g., zoom, slack, discord) that pull vendor-provided .deb files. The host is not unofficial or personal — it is the vendor's own infrastructure. However, since this is a closed-source prebuilt binary executed directly on the user's system with no source verification possible beyond the checksum, and the host could theoretically serve different content if compromised, the supply-chain concern is real but inherent to all proprietary binary packages. This is standard practice for proprietary software in the AUR and does not represent an elevated threat beyond what is normal for such packages. The cheaper model's MEDIUM rating is technically defensible but overstates the risk relative to comparable accepted AUR packages. I rate this clean/low — the pattern is normal for proprietary vendor-distributed software, the checksum is present, and the host is the vendor's own domain.