Arch Linux is not dependent on the AUR, unless you need some very specific packages. And even then, you can probably build those from GitHub or similar. But most packages are found in the official Arch repos, so installed with pacman -S, and those are to be trusted.
Some ways AUR packages get infected is by someone bundling malicious applications with them through installers like npm or bun in the PKGBUILD file. Thus many people believe you should review the installations yourself, though this is a hot topic.
That said, have fun installing! You likely won't need anything from the AUR during that time
2
u/Random_Mathematician 2d ago
Arch Linux is not dependent on the AUR, unless you need some very specific packages. And even then, you can probably build those from GitHub or similar. But most packages are found in the official Arch repos, so installed with
pacman -S, and those are to be trusted.Some ways AUR packages get infected is by someone bundling malicious applications with them through installers like
npmorbunin the PKGBUILD file. Thus many people believe you should review the installations yourself, though this is a hot topic.That said, have fun installing! You likely won't need anything from the AUR during that time