[safety question]: hyde arch linux safety questions

[alizaincodes]

Description

I want to install hyde on a fresh(I didn't installed currently arch linux installation). I have heard packages from arch linux user repository were hacked. Is it safe for me to install it? I don't know what packages hyde is going to install.

Steps to Reproduce

Try to install hyde with install.sh on arch linux

Expected Behavior

I expect that hyde script might download malicious packages. I dont want to get malicious packages on a fresh arch linux installation.

Actual Behavior

I currently didn't installed arch neither started hyde installation

Screenshots

No response

Environment

You dont need this.

Additional Information

No response

[gaelcool]

At this precise moment HyDE is undergoing an interesting migration, regardless the installation continues to hit the same beats as the Wikis guide (Available in multiple languages)
If you run into any issues you can follow-up, just be sure to include something related next time like the following print-out:

printf 'mode: %s\nconfig: %s\nprofile: %s\n' \
  "$HYDE_MODE" "$HYPRLAND_CONFIG" "$DCONF_PROFILE" "$HYDE_ACTIVATED" "$HYDE_FEATURE_LUA" "$QT_QPA_PLATFORM" &&
test -f "$HYPRLAND_CONFIG" || read -r -p ans "Interupted, continue?(y/n)"
test -z "$DCONF_PROFILE" || test -f "$DCONF_PROFILE"
hyprctl reload

So that we may better help out.

[kRHYME7]

some if not most exploits can be mitigated when you use chaotic aur. As it ships direct binary so no arbitrary commands being run. *some as the binary can be exploited elsewhere (fyr XZ or builds that modifies the code of the software you install).

Most of the exploits are at build part, using binary from chaotic aur prevents any malicious PKGBUILD to run arbitrary build commands that is malicious.

Also so far all AUR packages that is used by the core package are participated by me, either opening issues or just watching their upstream repo.

We don't really want to use AUR as much as possible.