• Lucy :3@feddit.org
    link
    fedilink
    arrow-up
    30
    ·
    3 months ago

    yay <package name>

    There is a 99% chance it’s in there, and there is an 80% chance it uses the latest version/git HEAD

      • rtxn@lemmy.worldM
        link
        fedilink
        arrow-up
        28
        ·
        3 months ago

        yay, a utility to access the AUR, where users share build scripts instead of binaries. It’s just one step above curl | sudo sh in terms of security.

        • Lucy :3@feddit.org
          link
          fedilink
          arrow-up
          7
          ·
          3 months ago

          Except it automates the steps you’d have to take to inspect and edit the script, if needed. Also, PKGBUILDs are much nicer to read than just plain install scripts. And, of course, it actually builds a package, which is then installed, so it’s not only tracked but can be updated like the rest of the system.

        • Flipper@feddit.org
          link
          fedilink
          arrow-up
          3
          ·
          3 months ago

          I don’t think the aur can switch the delivered script whether you are piping it into sh or not.