3 ms·
I meant more as in "as someone wanting to use something", rather than the security aspect. Most AUR packages I have seen have been incredibly easy to read - if
by Latty 9y ago
I meant more as in "as someone wanting to use something", rather than the security aspect.
Most AUR packages I have seen have been incredibly easy to read - if you really don't want to use them, it's still a good framework for making your own packages much more easily, so you can install from source without dumping unmanaged stuff into your system.
- rantanplan 9y agoI think Debian has a better process in which they vet packagers. It's a bit more tedious but I'd put my trust more easily in such a system. > Most AUR packages I have seen have been incredibly easy to read It's not about quality, but rather more about quantity. I don't have the time to vet every package.
- striking 9y agoVetting a package is as easy as reading through its PKGBUILD. Here's a sample one: https://aur.archlinux.org/cgit/aur.git/tree/PKGBUILD?h=pacaur https://aur.archlinux.org/cgit/aur.git/tree/PKGBUILD?h=pacau... makepkg pulls source files and possibly patches, and then compiles them and installs them according to the instructions. It makes life simple.