Is your feature request related to a problem? Please describe.
I'm always frustrated, when there appears to be exactly the same name package in both distro repo and AUR. And AUR version gets newer version than the repo one. And then yay tries to break my system with replacing trusted repo package with questionable AUR package with the same name, that just popped up...
Describe the solution you'd like
there could be 2 solutions.
-
if package of the exact same name already exists in the distro repo, some flag or config option to disable AUR lookalike to be installed, ever. Call it a security measure or whatever.
-
some yay only IgnorePkg equivalent just for AUR. You need to manually add everything that you don't want accidentally from AUR, but still better than being constantly and always offered to replace repo package with AUR one.
Is your feature request related to a problem? Please describe.
I'm always frustrated, when there appears to be exactly the same name package in both distro repo and AUR. And AUR version gets newer version than the repo one. And then yay tries to break my system with replacing trusted repo package with questionable AUR package with the same name, that just popped up...
Describe the solution you'd like
there could be 2 solutions.
if package of the exact same name already exists in the distro repo, some flag or config option to disable AUR lookalike to be installed, ever. Call it a security measure or whatever.
some yay only IgnorePkg equivalent just for AUR. You need to manually add everything that you don't want accidentally from AUR, but still better than being constantly and always offered to replace repo package with AUR one.