3 ms·
The explicit expectation with the AUR has always been that you can't blindly trust the PKGBUILD files. It's more like running an installer from a random website
by meribold 2mo ago
The explicit expectation with the AUR has always been that you can't blindly trust the PKGBUILD files. It's more like running an installer from a random website on Windows than it is to using official distro repositories. I think the wiki also always advised against using AUR helper tools that blur the lines between official repositories and the AUR.
- hug 2mo agoThe Arch wiki explicitly links to the AUR for lots of things, but the prime example is probably the NVIDIA page - https://wiki.archlinux.org/title/NVIDIA https://wiki.archlinux.org/title/NVIDIA - this page is going to be massively viewed, and if you have Pascal or older architecture the suggested driver is from, you guessed it, the AUR. Nowhere on this page does it suggest that the AUR is at all untrustworthy.