+1 from a security professional. ​Socket's npm analysis has proven really effective at curbing supply chain attacks. Bringing a similar automated scanning layer to the AUR would be a great win for safety, provided Socket provides some kind of open-source/community tier. Definitely worth trialing.
-- Borna Punda
