I noticed that in the repos there are a few packages that link their source back to the aur pkgbuild file, since the attacks on the aur last year I prefer to avoid it if possible. So I am wondering how said pkgbuild source works, am I correct in assuming it is not directly coming from the aur? More like the devs/maintainers are taking that pkgbuild then checking it like any other package, then they build it on their end to share with mirrors then the userbase? Thanks