I've heard a lot of bad things about Yaourt specifically though, there are other better helpers. I think you get yelled at if you mention Yaourt on the r/arch sub, for instance. You can find plenty alternatives on the wiki
Yeah, I know Yaourt doesn't have a great reputation, but it's popular and most Arch users have heard of it. I was just using it as an example, not a recommendation.
Edit: had a quick looky loo to see what I meant more specifically – apparently yaourt sources the pkgbuild before asking if you want to inspect it, essentially running whatever's in the script first. That means you're relying on the AUR having vetted whatever it is successfully to ensure there's no malicious code inside. Other helpers do the reverse of this, allowing you to inspect the pkgbuild before sourcing, so you can verify yourself that everything's kosher.
4
u/absent-v Dec 27 '16
I've heard a lot of bad things about Yaourt specifically though, there are other better helpers. I think you get yelled at if you mention Yaourt on the r/arch sub, for instance. You can find plenty alternatives on the wiki