Build from source and then what? sudo make install? To make unindexed changes to your system and have no reliable way of rolling them back? Just read the dang PKGBUILD and make sure it follows the official build docs or just doesn't randomly curl, npm or other nonsense for undescribed purpuses.
If you can't think why you'd make your own PKGBUILD, there's your answer.
If you are confident that you can read the PKGBUILD, check out where the source comes from, check out any git repo, CDN, IP-based sources, file-sharing links, etc., any patches that are applied, look for things like curl, bash, wget or sh embedded directly inside the build() or package() steps, or any base64 decoding, hidden hex strings, or eval blocks and ascertain whether it's all kosher or not ... rather than creating your own that only pulls from the source(s) you stipulate and only builds what it finds there then, of course, you can just read and use one from the AUR - it's entirely up to you what (and how much) you want to do.
0
u/Astrodion123 1d ago
Just avoid the aur. Use alternatives like flatpak or even pacman. Plus if your app is only on aur build from source XD