If anyone is curious, I checked the yay aur helper go dependencies here and it had none of the malicious packages mentioned on this post

LocalSend for quick local network file sharing from my phone that just werks. I prefer it over kde connect because the latter uses lots of random ports that kinda bloat my firewall whitelist. I know there is an alternative called warpinator, but I don’t see a reason to change my preferences for now.