Why would someone "Frankenstein" EOS with other distro's repos?

[cactux]

@limotux

I never meant anything bad about the repo or the guys.

I know. But since you mentioned that you had never heard about the repo before, I wanted to fill in with a bit more information.

I know they are a bunch of hardworking people, doing a great job and the repo is trusted by many users and if I am not wrong is enabled by default in Garuda Linux.

However, the fact remains that whenever you add a third party repository to your pacman, you have to trust the source of that repo. The responsibility is only yours.

For a more detailed discussion in general see

[FAQ] The dangers of using 3rd party repos

This is something I wrote last year and posted somewhere else. I thought it was worth sharing here as I see a lot of people using 3rd party repos. There are often discussions about the dangers of using AUR but it seems like there a lot less focus is on the dangers of using 3rd party repos. In general, using a 3rd party repo is much more dangerous than using AUR. With an AUR package, everything is fully transparent and the package is built on your machines. A quick look at the PKGBUILD file wi…