Egregoros

Signal feed

Timeline

Post

Remote status

Context

1
@kaia if you have read the arch wiki, they suggest not to use the AUR unless you really have to, for that exact reason. packages can be compromised there. also npm is ass, that's where a lot of compromised packages come from.

so even if you use arch and use only the arch repos and avoid the AUR, you'll be fine.

Replies

2