AUR has been reopened to registration. If you recall, AUR was hit with a wave of malware, where thousands of packages were infected. They had shut down registration to help stem the tide
This was sent out to the AUR mailing list, something I'm not signed up too, so I don't know if they're addressing one of the major loopholes in AUR, where anyone can claim an abandoned package.
This largely sums up the risks, and why I'll still avoid it. I only have a single foreign package (p-cloud)
View attachment 2646038