3 ms·

What does "scanning for malware" mean? As far as I know this is a totally open question, and the only credible answers (install in a sandbox) are too inconvenie

• charcircuit 2mo ago
  >are too inconvenient for widespread adoption. The owners of AUR would do this for all packages they host so the inconvenience does not fall on other people. AUR has to take responsibility over the security of what they offer.
  • tempfile 2mo ago
    The inconvenience is always with the person writing the package. When you restrict the build to a sandbox, if it fails, it's because the package actually depends on the thing the sandbox is limiting (usually network requests during the build). To fix this problem, the package has to change. This is why e.g. NPM does not roll out sandboxing.