aurek is a rust security wrapper for yay that adds a security check before installing aur packages. aur packages are community maintained and their pkgbuild files can execute arbitrary commands, so aurek fetches and scans the pkgbuild before allowing yay to continue. it uses heuristic and regex based detection for things like remote script execution, suspicious sudo usage, dangerous commands, obfuscation, downloads, permission changes and systemd or cron modifications. starting from v2.0.0, aurek can also use a local gemma model through llama.cpp for context-aware analysis, while keeping the whole process on the users machine with no external api required ,gemma (2b) is easy to run why waste money. v2.1.2 focused on making the workflow easier to use with scan-by-default, /etc/aurek.conf , better llm output, colored terminal output and on v2.1.4 more yay commands including package removal with -R. the project went through several iterations and a few very stupid bugs along the way, including multiple crates.io naming issues(it was really stupid) and a version reporting bug, but those were fixed and v2.1.4 is now published. aurek is not meant to guarantee that a package is safe, but to give users another layer of protection before trusting an aur pkgbuild. the project is open source and still has a roadmap for more detection methods, dependency scanning, additional llm models and support for other package managers.
Also i wd like to add github support also , i am genuinely asking myself if i shld i add paru too , but i believe in yay supremacy , so no.
