The curl | bash smells weird to me but I still do it from reputable enough sources since someone that doesn’t like it must be reviewing it. That said, there’s

The curl | bash smells weird to me but I still do it from reputable enough sources since someone that doesn’t like it must be reviewing it. That said, there’s ample evidence that the “enough eyeballs” stuff doesn’t work as well as we’d like in _any_ of these situations. If a sophisticated actor wanted to insert something malicious I’m not sure that one method is easier than the other.