I have noticed that several active projects like RakeSearch and ODLK are currently running from Russian servers. It is a very small niche area so I doubt that many people are auditing the code properly. I personally feel uneasy about running binary files from these sources on my own hardware.

Are there others here who have shared thoughts about the security of these specific projects lately. You are in principle downloading software directly from a region with a high risk of cyber attacks. I wish there was more transparency or independent control over these small projects to ensure user safety.

If I am suspicious about a project, I will only run it in a VM.