logoalt Hacker News

bee_ridertoday at 5:30 PM0 repliesview on HN

IMO allowing package adoption makes sense in the responsible/intended use-case: AUR packages aren’t trusted, you have to read the PKGBUILD anyway, so the reputation of the contributor doesn’t matter. Removing adoption is admitting that there’s no way to prevent some users from blindly trusting a PKGBUILD.

Which is probably the best choice, unfortunately.