I don’t. I guess I blindly trust the packages in arch and ready the pkgbuilds in aur. Never found and virus issues.