ripcord-arch-libs

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

• PKGBUILD:33 "https://cancel.fm/dl/${_file}"{,.asc}

An AI model (anthropic/claude-4.6-sonnet-20260217) reviewed this and agrees it is MEDIUM (confidence 72%): The PKGBUILD downloads a prebuilt proprietary AppImage binary from cancel.fm (the official Ripcord vendor site) and executes it to extract its contents. cancel.fm is the legitimate upstream host for Ripcord, so this is not an unofficial or personal host — it is the vendor's own distribution channel. The download is verified with a PGP signature against a pinned key (validpgpkeys) and a sha256sum, which provides reasonable integrity assurance. However, the core concern remains: this is a closed-source, prebuilt binary from a proprietary vendor that gets extracted and installed as executable code, with no ability to audit what it does. Additionally, a compiled shared library (hook.so) built from a third-party GitHub repo (geniiii/ripcord-audio-hook) is injected via LD_PRELOAD into the application at runtime, which is a meaningful supply-chain vector — any compromise of that repo would result in arbitrary code execution in the context of the Ripcord process. The combination of an unauditable proprietary binary plus an LD_PRELOAD hook from a separate personal GitHub repo keeps this at medium rather than clean, though neither element is clearly malicious.