2025-07-18 18:31 UTC
@froge@social.glitched.systems @archlinux@fosstodon.org
> DISCLAIMER: AUR packages are user produced content. Any use of the provided files is at your own risk.
Reckless people will do reckless things, users are advised to audit PKGBUILDs and all changes to them.
Replies (2)
-
@froge@social.glitched.systems 2025-07-18 18:33
@gromit@chaos.social @archlinux@fosstodon.org yeah, but everyone totally ignores or plays down the warnings, there is a culture of blindly trusting the AUR among arch users usually I'm a long time contributor to a large Linux community online, and often one of the first things users do on a clean install is setup an AUR helper and blindly pull packages they want
-
@utf_7@mastodon.social 2025-07-18 18:57
@gromit@chaos.social @froge@social.glitched.systems @archlinux@fosstodon.org is their an explanation for dumb people like me, why it is more unlikely that something like that will happen in the official packages or even in the debian repository. like a package maintainer goes rogue?