New comment by CameronNemo on void-packages repository https://github.com/void-linux/void-packages/pull/41469#issuecomment-1372529632 Comment: I knew it was paper's domain, but I had no idea what it was that was downloaded. This is a little more clear on what is being achieved, but relying on a github mirror is not strictly better for supply chain reasons IMO. Hosting something on https://repo-default.voidlinux.org/distfiles/ (maybe just the patch) or using Leah's git server are both alright options to me, however a comment should be added explaining why we are not (just) downloading GNU's release artifacts.