AUR however, is untrusted (or rather shouldn’t be trusted), often out of date
So basically like a PPA which are used by many users of Ubuntu. The only difference is that the PKBUILD files used to build the packages are easier to check than the final packages in a PPA. And that’s exactly what is a big advantage for me.
sometimes requires compilation,
This is often because a project does not offer ready-made packages that can be downloaded from Github, for example. There are also people who do not trust ready-made packages from unknown third parties. I wouldn’t necessarily download and execute a binary file from a Dropbox of a user I don’t know. Compiling is the safer way if the source code is downloaded from a more trustworthy source.
and doesn’t even have any good pacman wrappers since yaourt (that I’m aware of).
Personally, I don’t think aurutils, paru and yay are bad. I currently use aurutils myself. But as far as AUR helpers are concerned, everyone has their own preferences. That’s why there are so many ;-)
Maybe I just don’t use enough random software, but I never understood the issue with PPA. The only ones I used were maintained by the software developer. If I trust the software, then I trust the PPA. The PKBLD on the other hand usually requires trust of some third party to wrap what the developer provided.
The PPA seems safer in that scenario.
How do you keep Discord up to date? Their PPA would do it. There were a few days a while back when the PKBLD was out of date and users were SOL for automatic updates. The community (maybe Manjaro) response was to use the Discord website or manually download and install. How is that better than PPA? Now I just always manually install when Discord has an update and don’t use the repository. My next install won’t be Arch based.
So basically like a PPA which are used by many users of Ubuntu. The only difference is that the PKBUILD files used to build the packages are easier to check than the final packages in a PPA. And that’s exactly what is a big advantage for me.
This is often because a project does not offer ready-made packages that can be downloaded from Github, for example. There are also people who do not trust ready-made packages from unknown third parties. I wouldn’t necessarily download and execute a binary file from a Dropbox of a user I don’t know. Compiling is the safer way if the source code is downloaded from a more trustworthy source.
Personally, I don’t think aurutils, paru and yay are bad. I currently use aurutils myself. But as far as AUR helpers are concerned, everyone has their own preferences. That’s why there are so many ;-)
Maybe I just don’t use enough random software, but I never understood the issue with PPA. The only ones I used were maintained by the software developer. If I trust the software, then I trust the PPA. The PKBLD on the other hand usually requires trust of some third party to wrap what the developer provided.
The PPA seems safer in that scenario.
How do you keep Discord up to date? Their PPA would do it. There were a few days a while back when the PKBLD was out of date and users were SOL for automatic updates. The community (maybe Manjaro) response was to use the Discord website or manually download and install. How is that better than PPA? Now I just always manually install when Discord has an update and don’t use the repository. My next install won’t be Arch based.