Post #2746148

The difference is they test the core packages they release. That's their selling point. Just downloading old pkgbuilds without vetting anything is called an attack vector.