Sorry if I was unclear. You usually don't inspect the install scripts for official packages since you put the trust in the official team. You don't trust(or at least shouldn't) AUR packages, hence you should inspect the install script for those packages. I don't really see what the alternative would be.
GameEngineer
joined 1 year ago
So what would the alternative be? If the resources or desire don't exist to make a package official, how else would you install it?
I'd recommend checking out Asket. They have a lot of transparency. I assume that not every step of every product is within the EU, but you should be able to see it per product.
I have been quite happy with the majority of Asket's clothes. I originally found them when looking for more environmentally friendly options.
I have a pair of their normal length pants and they are probably on their 7th year. No repairs needed yet, even with around 3 wears a week. These are heavier duty than some of their other models. I had a pair of lighter summer pants that only lasted a few years before the zipper became a problem.
Huge respect on standing one's ground like this.
Exactly. Let's also not forget it isn't just a matter of inspecting it once, it would be for EVERY update of the script. It would be a major bottleneck to get updates out for any package. There are comments on the AUR site where people can flag issues, so we do have some crowd sourcing, but I'd still not trust it.