Looks like a package for those who have no package manager. Highly insecure - do...

Looks like a package for those who have no package manager. Highly insecure - do they review Dockerfile on each installation? Does it store and display pulled git hash?

Looks like work in progress:

    $ git clone https://aur.archlinux.org/yay.git
    $ cd yay
    $ makepkg -si

... and never used.

Makes sense as a wrapper for PKBUILD

    pkgname=qemu-osx
    pkgver=10.14.6
    depends=(qemu libvirt dnsmasq virt-manager bridge-utils flex bison ebtables
             netctl libvirt-dbus libguestfs)
    ...

New way of `./configure && make && make install` and `curl | sh`. Why can't all distribution have easy to define package [1]? And publish it [2]?

[1] https://wiki.archlinux.org/index.php/PKGBUILD

[2] https://aur.archlinux.org/