TranscriptImage of a man pointing a gun at his own foot.

Caption: Installing an AUR package without reading it's PKGBUILD.

you are viewing a single comment's thread
view the rest of the comments
[–] 27 points 2 months ago (7 children)

If you want a bunch of stuff that's not in core or extra and you don't want to intensely babysit the AUR, you could try Chaotic-AUR. It hosts prebuilt packages for a bunch of AUR packages which are actively maintained by the Chaotic team.

I consider it to be more secure than the AUR proper since they actually care for their packages and review nontrivial changes. For instance, the recent takeover attacks didn't hit Chaotic-AUR builds since the changed packages didn't make it past the review.

It's still an unofficial third-party repository and closer to the AUR than to extra but I consider it a major step up.

  • source
  • parent
  • hideshow 7 child comments
  • [–] 13 points 2 months ago (5 children)

    Yes, but is it good, neutral, or evil?

  • source
  • parent
  • hideshow 5 child comments