New comment by r-ricci on void-packages repository https://github.com/void-linux/void-packages/pull/37853#issuecomment-1186561405 Comment: > xlint is currently passive - afaikit doesn't run any commands from the template and doesn't make any network requests, I am not sure if this is in scope of xlint. This check could be static (e.g.: grep the string `http://`). Some websites don't support HTTPS, but very few, so we can just ignore false positives. If this is not acceptable, since this isn't a very important issue, then these changes can be done at author/reviewer's discretion when updating the package.