Embed Notice

@puppygirlhornypost @dalias I agree with you; I'm going to try to rephrase my initial question 😅

Given that virtually all¹ package managers have some way to run arbitrary postinstall scripts (as root!); what makes a deb/rpm/AUR/... better than curl|sh?

My stance is that if I install packages from "core" repos, I'm probably good, because these maintainers usually care *a lot* and to a fantastic job (at least compared to the average dev trying to package their stuff).

But with 3rd party stuff…