pp-sncf-connect

SUSPICIOUS: the read-only Navitia/SNCF use case is coherent, but the installation path relies on a third-party mutable installer and secondary binaries rather than an official SNCF/Navitia distribution channel. The optional webhook sink also creates real egress capability. This looks more like elevated supply-chain and data-flow risk than confirmed malware.