I'm seeing an increasing number of programs, whose configure and/or makefile have been written, to open a connection to some remote url (usually controlled by the project) download file(s) from there and build them into the software.
I think this is a bad idea, from many points of view: Scalability, Security and Reproducability. I haven't found any such instances in GNU Software, but I think we should put a statement about it in the GCS. Seriously? Really curious what programs do this totally crazy behaviour.
