You are now creating a mistreating and clearly wrong connection: HyperbolaBSD was not created out of a possible derivation. Hyperbola is complete independent developed, only using pacman. We have no connection to the AUR and we advise every user / developer to look on the packaging-script. If they do not want to do this, we cannot help out and we are surely also not willing to do so.

Please read next time the source you are using, to quote:

This is written directly within that article as quote from the AUR-administration. And we are talking foremost here about so-called binary packages, created from upstream binary distributed data and tarballs. Did you have even had a look how packages here are created? That users are doing their own packages while Hyperbola is doing direct different also? We do not even share any connection with the AUR and our infrastructure is also complete different to build. Creating a thread based on an impression and feeling is the wrong way and you were told not to act upon those basics several times within debates. Ask before doing something on assumptions: We are not Arch-based. Besides that your current statements towards Arch GNU/Linux are also wrong.

Thread closed!

For Arch users, I assume that a degree of diligence is required when it comes to installing programs. I assume that practice is verification before compiling the source code. A straight software installation from the OS repository is a blind check. The server have some questionable protocols that might as well jeopardize Arch into Windows or iPod Apple store.

I know that Hyperbola GNU/Linux-libre is regarded as a different OS from Arch Linux, but I can't shake the feeling that it uses some of its design. Can anyone ensure that a vetting process is in effect for any file uploads/edits in the Hyperbola OS repository? Furthermore, if Hyperbola does derive from Arch, does that mean there is a risk to unknowingly extract malware as a base for software on other Arch-like OS? If Hyperbola does indeed find itself at risk from derivation, it is a understandable move to develop HyperbolaBSD. And what about the Arch users, where should they go? I hope that they look forward to Hyperbola (while I can't vouch for encryption options, I can attest that Windows XP on a 32bit machine would be on a similar encryption level), but I suppose Parabola would suffice for their taste.
As they say, it is nigh time to abandon ship, the Arch ship, that is.

Cited references:
https://www.bleepingcomputer.com/news/s … t-malware/