Hacker News new | comments | show | ask | jobs | submit login

I think Debian has a better process in which they vet packagers. It's a bit more tedious but I'd put my trust more easily in such a system.

> Most AUR packages I have seen have been incredibly easy to read

It's not about quality, but rather more about quantity. I don't have the time to vet every package.

Vetting a package is as easy as reading through its PKGBUILD. Here's a sample one: https://aur.archlinux.org/cgit/aur.git/tree/PKGBUILD?h=pacau...

makepkg pulls source files and possibly patches, and then compiles them and installs them according to the instructions. It makes life simple.

Guidelines | FAQ | Support | API | Security | Lists | Bookmarklet | Legal | Apply to YC | Contact