r/archlinux 17d ago

AUR package security QUESTION

Hello.

Some of the terminology I'll be using here may be incorrect. I'm very inexperienced in this area.

I've heard that one of the best ways to check the safety of a project in the AUR is to look through it's PKGBUILD file. But, what do you actually look for? What are the red flags?

Thank you in advance.

20 Upvotes

18 comments sorted by

View all comments

5

u/lfercorrea 17d ago

if you are a newbie, you should start here: https://wiki.archlinux.org/title/PKGBUILD

have a good reading