Is aur down again?

[pebcak]

@archbtw

implement some mechanism to detect harmful PKGBUILDs

Security of AUR packages? A question, and a proposal if you will

Good Afternoon everyone, I’ve been an Arch/Endeavour user for only a couple months now, but I’ve been a Linux user and software developer for 15+ years, and now a cyber security researcher/pentester for the past couple years. I’m writing because I have some questions about AUR packages and maybe how we can ensure or improve the security of them, and what can be done to ensure they are safe. I’ve been learning about PKGBUILDs on AUR and one of the things that kind of concerns me, is the securi…