logoalt Hacker News

silver_silvertoday at 6:46 AM1 replyview on HN

AUR is an effectively unmoderated user repo. It’s not Arch Linux’s core repository, nor is it enabled by default or indeed even possible to use without manual downloads from outside the package manager.


Replies

benj111today at 10:51 AM

There's still a security there though.

You have confidence you are actually downloading the same foo as everyone else. And if there were an issue there would be pushback. Not so if you get some random exe from warez.com

Yes it isn't perfect, it's still a lot better than windows land.