I don't know how to analyze code ..... Are AUR packages safe?

[pebcak]

@arch_lover

Can I trust AUR packages ?

Short answer: mostly yes but not blindly.

Long answer:

AUR PKGBUILDs

The AUR is one of the safest ways to install software, just because it is so transparent. But it does not tolerate just looking up the package in Pamac and clicking on the Build button, or doing yay package_name blindly. It requires that the user knows what’s going on. That’s why I recommend trying to build at least one package manually, to understand what’s going on, before using an AUR helper like pamac or yay. yay has a nice feature that allows you to inspect a PKGBUILD file before installin…