I'm spending a lot of my time removing AUR packages for alternatives in the official Archlinux repositories. I've shifted from Dropbox to RClone, from acpilight to brightnessctl, from spotify to spotify-launcher and so on. Has anyone else having the same trust problem?
Source: [Hacker News](https://news.ycombinator.com/item?id=48595300)