How do you vet open source software if you don't know code well? (slrpnk.net)

submitted 3 days ago by reallykindasorta@slrpnk.net to c/asklemmy@lemmy.ml

15 comments fedilink hide all child comments

There are oodles of neat and singular programs on github and similar. Curious what steps people take to vet for malware before downloading and trying stuff, especially if you’re not very familiar with the coding language it’s written in.

you are viewing a single comment's thread
view the rest of the comments

[-] daggermoon@lemmy.world 6 points 2 days ago

In the case of the AUR, I just read the build scripts. Make sure it isn't deleting my home directory or curling in some shady shit.

this post was submitted on 17 Jan 2026

21 points (95.7% liked)

Asklemmy

52218 readers

533 users here now

A loosely moderated place to ask open-ended questions

Search asklemmy 🔍

If your post meets the following criteria, it's welcome here!

Open-ended question
Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions. Assume best intent and be excellent to each other.
Not regarding using or support for Lemmy: context, see the list of support communities and tools for finding communities below
Not ad nauseam inducing: please make sure it is a question that would be new to most members
An actual topic of discussion

Looking for support?

Looking for a community?

Lemmyverse: community search
sub.rehab: maps old subreddits to fediverse options, marks official as such
!lemmy411@lemmy.ca: a community for finding communities

~Icon~ ~by~ ~@Double_A@discuss.tchncs.de~

founded 6 years ago

MODERATORS