I know. I just wanted to mention that because AUR doesn’t feel like downloading random stuff from internet when you’re using it with something like yay.
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !piracy@lemmy.dbzer0.com
⚓ Dedicated to the discussion of digital piracy, including ethical problems and legal advancements.
Maybe on Arch via AUR, although I have no idea because I don’t use Arch.
Remember to be careful with AUR. There’s already been malicious code introduced via AUR after someone picked up orphaned PDF viewer as maintainer.
That was in 2018…
https://www.bleepingcomputer.com/news/security/malware-found-in-arch-linux-aur-package-repository/
The AUR has the same risks as adding a ppa to a debian tree install, or downloading an rpm from a website.
If it’s not in the official repository of your repo treat with caution
Yep, but it can happen again. There may already be something undiscovered.
The same is true for all package management systems that work the way that the AUR does.
Sure but that’s true of any packaging system. The .deb or .rpm you just downloaded off not-a-scammer-honestly.com could just as easily be malware.
I know. I just wanted to mention that because AUR doesn’t feel like downloading random stuff from internet when you’re using it with something like yay.