3 ms·
Given the design of most of the AUR "helpers" out there, I would guess that there are a non-trivial amount of users who view the AUR as safe.
by Skunkleton 8y ago
Given the design of most of the AUR "helpers" out there, I would guess that there are a non-trivial amount of users who view the AUR as safe.
- dbrgn 8y agoYaourt shows a big fat red warning every time you install a package. It also offers to open PKGBUILD and .install files for inspection.
- imtringued 8y agoIt should just show the PKGBUILD every time. If it's not doing anything sketchy it's often only a dozen lines.
- Skunkleton 8y agoaurman does a good job. It caches the old PKGBUILD and lets you view diffs. Still, reviewing a PKGBUILD is a non-trivial process.
- ronjouch 8y agoThanks! I got bored of looking for a yaourt replacement because they seemed all the same, and discussions of AUR helpers often turn into flamewars, but PKGBUILD diffs is a valuable feature. Trying aurman :)
- d4l3k 8y agoYaourt is also unmaintained and unsafe. Please switch to something better. https://wiki.archlinux.org/index.php/AUR_helpers#Active https://wiki.archlinux.org/index.php/AUR_helpers#Active
- dbrgn 8y agoOh wow. I was not aware, thanks for letting me know!