Man, it's 2026. When you say "orange asshole", you have to clarify.
post
this is the intended purpose of the AUR. it was never promised to be high quality or secure code, which is why there are warnings against using it if that is your concern. moth wonders why you complain about something you were told you must accept when using the AUR.
replies:
AUR was never trustworthy. It leans very much towards the convenience end of the security-convenience spectrum.
This annoys me as well. And its not just AUR either, I hit this with pi.dev plugins, which are in NPM:
https://pi.dev/packages?name=permissions
Look how many duplicates there are, just because one person mildly changed am existing one, and never contributed back instead.
People are publishing their slop projects as if they intend on maintaining them, but they clearly aren't capable or willing to actually maintain them.
replies:
Why shouldn't they? They are using aur as intended, repository for user provided package recipes.
replies:
The only thing on the AUR is a recipe to build the package on arch. In a perfect world, the AUR contains a build recipes for every package in existence. It's always up to the user to be discerning about what they install on their system.
all 10 comments