openxr-layer-ultraleap

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

• PKGBUILD:25 source=("https://repo.ultraleap.com/apt/pool/main/o/${pkgname}/${pkgname}_${pkgver}%2b${commit}.CI${ci}_amd64.deb"

An AI model (anthropic/claude-4.6-sonnet-20260217) reviewed this and agrees it is MEDIUM (confidence 72%): The PKGBUILD downloads a prebuilt binary .deb (containing a shared library libUltraleapHandTracking.so) from repo.ultraleap.com, which is Ultraleap's own official Debian/Ubuntu package repository — a plausible and legitimate vendor host. The library is installed as a non-executable shared object (m644), not directly executed during the build, but it will be loaded at runtime by OpenXR applications, making it effectively executed code. The integrity check uses only MD5, which is cryptographically weak and provides minimal supply-chain assurance. There is no GPG signature verification (validpgpkeys is empty). The prepare() function extracts data.tar.gz from the .deb without verifying the control archive, which is standard .deb unpacking but means the checksum only covers the outer .deb. Overall: the source host is plausibly official, the pattern (repackaging a vendor .deb) is common in AUR, but the binary nature of the payload combined with weak integrity checking (MD5 only, no PGP) represents a genuine medium supply-chain concern — if the upstream host were compromised or the file swapped, there is no strong verification. This is a real medium, not a false positive.