New review comment by mintsuki on void-packages repository https://github.com/void-linux/void-packages/pull/31658#discussion_r659171278 Comment: Ideally since they download over `https` there should be no malicious tampering done at download time. It would be possible to download the packages needed using distfiles ahead of time anyways, will do that.