Not true - it’s a culture of personal responsibility. The comparison to “leadership” misses that Arch is a volunteer project with limited resources. Blaming leadership for community culture is crazy - the community is very diverse, and many maintainers do review PKGBUILDs. The very idea that ‘making AUR more secure’ is simple is frankly very naive… automated checks can’t catch all malicious logic. Practical improvements might include b etter reputation systems, mandatory diff reviews for up...