We may semi-trust our package and repo systems. This tool is readily available through AUR on my Arch machine, I see.
Or we may go the whole hog and actually have a peek through the source.
AUR, Arch User Repository.
> thus you are expected to vet the packages yourself
Obviously, as a long time Arch user I didn't know this.
It is the Arch User Repository.
> DISCLAIMER: AUR packages are user produced content. Any use of the provided files is at your own risk.[0]