Vetting a package is as easy as reading through its PKGBUILD. Here's a sample one: https://aur.archlinux.org/cgit/aur.git/tree/PKGBUILD?h=pacaur https://aur.arc

Vetting a package is as easy as reading through its PKGBUILD. Here's a sample one: https://aur.archlinux.org/cgit/aur.git/tree/PKGBUILD?h=pacaur https://aur.archlinux.org/cgit/aur.git/tree/PKGBUILD?h=pacau... makepkg pulls source files and possibly patches, and then compiles them and installs them according to the instructions. It makes life simple.