I once found a Rust program that streamlined the PKGBUILD reviewing process a lot by, first of all, giving you a really neat list of patterns and behaviours that would make a PKGBUILD suspicios or even plain dangerous, then having a scriptable rule-based engine that would either abort that operation, or show warns and workarounds to you.
I forgot its name, unfortunately, and I installed it on my previous installation (Garuda, now I’m on CachyOS).
Very dumb of my part not to try to write that down before the OS change lol.
It was not that one, but yeah, it’s basically the same.
I just remembered the one(s) I used a while ago, tho, they were aur-guard, and aur-scanner, I used these two (the second one just because its aur-scan codes [OPTIONS] and aur-scan explain <CODE> commands.
I once found a Rust program that streamlined the PKGBUILD reviewing process a lot by, first of all, giving you a really neat list of patterns and behaviours that would make a PKGBUILD suspicios or even plain dangerous, then having a scriptable rule-based engine that would either abort that operation, or show warns and workarounds to you.
I forgot its name, unfortunately, and I installed it on my previous installation (Garuda, now I’m on CachyOS).
Very dumb of my part not to try to write that down before the OS change lol.
pkgwatch maybe?
It was not that one, but yeah, it’s basically the same.
I just remembered the one(s) I used a while ago, tho, they were aur-guard, and aur-scanner, I used these two (the second one just because its
aur-scan codes [OPTIONS]andaur-scan explain <CODE>commands.