Should I be concerned about the lack of package signing?
 

I've been distro hopping for a little bit now and I've been looking for something that is lightweight and speedy, and I happened to come across Arch Linux. I read about the lack of package signing that it has, and this has kind of kept me back from installing it onto my main computer.

Also, how about breakage? Should I be worried about that too?

Thanks in advance.

Package signing is an issue and this shortcoming is being addressed by the Arch developers. The Arch package manager, pacman, is currently being revised to accommodate package signing so it will eventually have package signing. Here's a link to the Arch wiki on this subject:

https://wiki.archlinux.org/index.php...ackage_signing

I don't know the status but it appears that active development is taking place.

Breakage is an issue with any rolling release distro; they are just inherently less stable and Arch is no exception. If you routinely update any rolling release long enough, sooner or later, something will break. You do have the convenience of not having to reinstall every six months or so but the trade off is less stability. You should make frequent backups of any rolling release and be prepared for something to break. If you are not willing to deal with that, a rolling release is not for you.

Breakage can occur on occasion. It is prudent to read the available documentation/tips posted on the Arch website about recent updates. On the Arch website they will post fixes to bugs/anomalies that pop up.