New packages got automatically installed from AUR or Flathub instead official repos

I hope that a software will never auto install. because of that i opened this threat.

So jack hat a lot of dependencies on my system. And i dont find it in the official repos. So what happend if jack got removed from the repos? Will cachy replace it with an alternativ version? Maybe from the AUR?

Edit:
I just found this: The jack package has been dropped by Arch so is now listed as an Aur in Cachy
So maybe i am right?