• TootSweet@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    ·
    10 months ago

    Just always write your own PKGBUILDs and never use the ones from AUR.

    In fact, just write your own PKGBUILDs rather than using the Arch repos.

    Make Arch Gentoo Again.

    • LemmyHead@lemmy.ml
      link
      fedilink
      arrow-up
      1
      ·
      10 months ago

      I don’t get all the noise around AUR being unsafe. Just verify the PKGBUILDS whenever you install or update something.

      • Chewy@discuss.tchncs.de
        link
        fedilink
        arrow-up
        1
        ·
        10 months ago

        Just verify

        requires basic programming knowledge or at least some time to get familiar with PKGBUILDs, and then they have to take the time to read it.

        Yes, I agree people should at least look up where it loads data from, but people are lazy.

        • LemmyHead@lemmy.ml
          link
          fedilink
          arrow-up
          0
          ·
          10 months ago

          I would argue that it’s their own fault then. Laziness is not a valid excuse to put yourself so much at risk. If you start doing it consistently, it becomes a habit and won’t take much effort. Of course, the familiarity with PKBUILD syntax has a learning curve

          But a peer-reviewing system would be a better approach in AUR. Weird that it’s not been implemented yet.