chocolatey
Note: Flag the download urls if the domain doesn't match the projecturl and not github, fosshub or other well-known location
Note - it could be perfectly valid. But if it is not, then it is required to fix.
I guess fosshub can be removed from the title though. Anyways, isn't this something that is enforced by the moderators already? Namely (according to the mod docs) that the download url is located on the project page? We should according to the docs:
If the package downloads anything, is it getting downloads from the proper location? Follow the projectUrl to the project site to see where it is downloading from - it should match the scripts. If not there needs to be a really, really good reason for not doing so.
Of course, flagging it couldn't hurt though, but it should probably be compared to the project url and the project source url (or any trusted download location). (I know everything except project source url was already mentioned)
