Security of AUR packages? A question, and a proposal if you will

[Kresimir]

@alenbasic

This seal of approval can’t really assist users who are unable to validate things themselves because if they aren’t sure how to validate themselves they can’t really trust you’re doing a good job in the first place. The only thing I think people really ought to do if they have the time (and the ability) is to scan packages that are updated and report the suspicious ones. This helps keep the AUR as a whole safe.

As I suggested in the post I linked above, when installing packages from the AUR, always upvote the good ones, and flag the bad ones. That makes the AUR better for everyone.

I am my own package reviewer, I don’t want any third-party gatekeepers telling me what software I may or may not use, for my own safety.