puppet-bolt

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

• PKGBUILD:13 source=("https://apt.puppetlabs.com/pool/${_ubuntu_release}/puppet/p/puppet-bolt/puppet-bolt_${_pkgver}_amd64.deb")

An AI model (anthropic/claude-4.6-sonnet-20260217) reviewed this and agrees it is MEDIUM (confidence 72%): The PKGBUILD downloads a prebuilt binary .deb from apt.puppetlabs.com, which is the official Puppet Labs APT repository — a legitimate vendor host. However, the package installs a prebuilt binary bundle (Puppet Bolt ships with a vendored Ruby runtime and many bundled gems inside /opt/puppetlabs) rather than building from source. The checksum is MD5-only (weak, but present). The core concern is that this is an executed binary from a vendor binary repository rather than source-built, which is a genuine supply-chain consideration: if the upstream .deb were tampered with or the checksum bypassed, arbitrary code would execute. That said, apt.puppetlabs.com is the canonical official distribution channel for Puppet packages, making this equivalent to installing from the vendor's own APT repo. The risk is real but inherent to any binary-only package from a vendor repo, not an unofficial or personal host. This pattern (repackaging official vendor .deb for Arch) is common in AUR and the host is authoritative. The cheaper model's MEDIUM rating is defensible but slightly over-stated given the official vendor origin; however, the binary execution concern and weak MD5-only checksum keep it at medium rather than clean.