InternetPirate@lemmy.fmhy.ml to Linux@lemmy.ml · edit-21 year ago...message-squaremessage-square50fedilinkarrow-up112arrow-down127file-text
arrow-up1-15arrow-down1message-square...InternetPirate@lemmy.fmhy.ml to Linux@lemmy.ml · edit-21 year agomessage-square50fedilinkfile-text
minus-squareM-Reimer@lemmy.worldlinkfedilinkarrow-up5arrow-down2·1 year agoYou should carefully review anything you install from AUR. No review happens there at all. Everyone can upload anything he likes.
minus-squareFryboyterlinkfedilinkarrow-up3·1 year agoYes, and PKGBUILD files with bad intentions have been published there in the past (https://lists.archlinux.org/pipermail/aur-general/2018-July/034151.html). But both Manjaro (https://wiki.manjaro.org/index.php/Arch_User_Repository) and vanilla Arch (https://wiki.archlinux.org/title/Arch_User_Repository) point out the possible dangers clearly enough in my opinion. Apart from that, it is definitely easier for users to check for example the PKBUILD files in the AUR than ready-made packages in a PPA for Ubuntu.
.
You should carefully review anything you install from AUR. No review happens there at all. Everyone can upload anything he likes.
Yes, and PKGBUILD files with bad intentions have been published there in the past (https://lists.archlinux.org/pipermail/aur-general/2018-July/034151.html).
But both Manjaro (https://wiki.manjaro.org/index.php/Arch_User_Repository) and vanilla Arch (https://wiki.archlinux.org/title/Arch_User_Repository) point out the possible dangers clearly enough in my opinion. Apart from that, it is definitely easier for users to check for example the PKBUILD files in the AUR than ready-made packages in a PPA for Ubuntu.