The Arch User Repository Runs on Trust. AI Is About to Break That.
Someone built an AI tool to review AUR packages — and it works well enough to be dangerous. The real threat isn’t false positives or missed vulnerabilities. It’s that AI review replaces the AUR’s social trust model with a black box you can’t argue with, can’t inspect, and can’t improve. The AUR runs on collective human judgment. AI doesn’t enhance that — it erodes it.