Hacker News new | ask | show | jobs
by silver_silver 10 days ago
AUR is an effectively unmoderated user repo. It’s not Arch Linux’s core repository, nor is it enabled by default or indeed even possible to use without manual downloads from outside the package manager.
1 comments

There's still a security there though.

You have confidence you are actually downloading the same foo as everyone else. And if there were an issue there would be pushback. Not so if you get some random exe from warez.com

Yes it isn't perfect, it's still a lot better than windows land.