riscv32-corev-elf-gcc-bin

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

• PKGBUILD:14 source=("https://buildbot.embecosm.com/job/corev-gcc-centos7/48/artifact/corev-openhw-gcc-centos7-${pkgrel}.tar.gz")

An AI model (anthropic/claude-4.6-sonnet-20260217) reviewed this and agrees it is MEDIUM (confidence 72%): The PKGBUILD downloads and installs a prebuilt binary toolchain (GCC cross-compiler) from buildbot.embecosm.com, which is Embecosm's own CI/build infrastructure rather than a formal release mirror. Embecosm is the legitimate upstream maintainer of CORE-V toolchains for the OpenHW Group, so this is not a random personal host — it is the actual vendor's buildbot. However, CI artifact URLs (job/corev-gcc-centos7/48/artifact/...) are inherently less stable and less trustworthy than versioned release downloads: artifacts can be overwritten, the build number is mutable, and there is no formal release signing. The package installs executed binaries (a full GCC toolchain) directly from this CI host with only a sha256 checksum for integrity. The sha256 does pin the exact artifact, which mitigates silent substitution risk somewhat, but the source is still an unofficial/CI artifact host rather than a proper release endpoint. This meets the medium threshold: executed binaries from a non-release (CI artifact) host, even if the vendor is legitimate.