You if you have a package foo-git. I thought ‘yay -Syu’ wouldn’t update because the pkgbuild hasn’t changed(even though the source has). But if you did get a new pkgbuild, won’t it rebuild foo-git regardless of whether the source has changed?
If we are talking about a pkgbuild that hasn’t changed that we have used in the past to install from that has always pulled the latest version of code from a certain repository, the risk seems pretty much the same as the first time you did the original install. What is the situation that you would choose not to install that?