Practically, is there a better alternative to Arch/AUR? I've used it for years because of the bleeding-edge packages and stability (for me) but with the increased security incidences I don't feel safe. I don't have the time/desire to read the build files of every package I install.
Pushes to arch AUR are suspendended right now.
71–72 of 72 posts
Re: Pushes to arch AUR are suspendended right now.
#72Practically, is there a better alternative to Arch/AUR? I've used it for years because of the bleeding-edge packages and stability (for me) but with the increased security incidences I don't feel safe. I don't have the time/desire to read the build files of every package I install.
Arch is fine, just don't use the AUR unless you are prepared to validate the PKGBUILD.
Personally, I only use AUR packages that just wrap binaries from well known sources, the only thing that should change in the diff is the sha256 and the version string which makes re-validating them after an update only take a few seconds.