TranscriptImage of a man pointing a gun at his own foot.

Caption: Installing an AUR package without reading it's PKGBUILD.

you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 2 months ago* (last edited 2 months ago) (2 children)

I once found a Rust program that streamlined the PKGBUILD reviewing process a lot by, first of all, giving you a really neat list of patterns and behaviours that would make a PKGBUILD suspicios or even plain dangerous, then having a scriptable rule-based engine that would either abort that operation, or show warns and workarounds to you.

I forgot its name, unfortunately, and I installed it on my previous installation (Garuda, now I'm on CachyOS).

Very dumb of my part not to try to write that down before the OS change lol.

  • source
  • hideshow 2 child comments
  • [–] 4 points 2 months ago (1 child)