Post #3331124
2026-06-16 07:21 UTC
Agreed, I feel like people are lacking a bit of self reflection in regards to this issue. The reason why people use the AUR is because it gives access to software outside of the official repos. No distro packages every piece of software out there. Therefore there is always a need for third party repos and that is why every distro has its own AUR equivalent. Thus leading to the same problem. Blindly installing software will never be a safe thing to do.
Replies (1)
-
@gabmus@retrolemmy.com 2026-06-16 07:25
also, if anything installing stuff from the AUR makes things slightly safer because PKGBUILDs and .install files are a lot easier to inspect: you can check the source repo/tarball/whatever points to an official source, and you can verify that the scripts (which are just shell scripts) are not doing anything nefarious. on the other hand, IIRC OBS and COPR just distribute binaries that are very hard to inspect