This is also why AUR helpers are unofficial and the packages don't come prebuilt. The official way to use the AUR is very manual, precisely to encourage reviewi

This is also why AUR helpers are unofficial and the packages don't come prebuilt. The official way to use the AUR is very manual, precisely to encourage reviewing. You have to download the PKGBUILD and accompanying files manually (git clone, etc.), review the files, then `makepkg`, then `pacman -U`. It's in the wiki article for the AUR: https://wiki.archlinux.org/title/Arch_User_Repository https://wiki.archlinux.org/title/Arch_User_Repository It even says: > 2. Verify that the PKGBUILD and accompanying files are not malicious or untrustworthy. > but I really hope if Arch maintainers can find a solution to make the AUR safer Safe packages go on the official repos. The entire point of the AUR is to be a low-friction repo for Arch users to share their packages. A "safe" AUR is to have no AUR and just have the official repos.