Yay v13, the popular AUR helper for Arch Linux, introduces two new features in response to the recent AUR malware flood that compromised over 1,500 packages. First, search results and upgrade menus now display a PKGBUILD last-modified timestamp as an extra signal to help users spot potentially risky packages. Second, Lua-based hooks and configuration are now supported via an init.lua file, enabling users to automate package review at various points in the install and upgrade flow. Key hooks include AURPreInstall (fires after PKGBUILD fetch, before any menus), AURPostDownload (fires after source verification), and UpgradeSelect (fires during yay -Syu before the exclusion screen). The existing config.json remains supported, with init.lua overriding it and CLI flags taking highest priority.
