How is that relevant unless you read the make file?
If you don't trust upstream, a PKGBUILD from AUR is the least of your problem.
If you don't trust upstream, a PKGBUILD from AUR is the least of your problem.