

Lots of answers touched the correct answer, which is that in reality things don’t follow parabolas on earth, a parabola is just close enough to the actual thing the object is doing to be indistinguishable. In reality everything follows elliptical orbits, but the top of an ellipsis with a Major axis of 6378 km and a few meters in the minor axis looks the same as a parabola, especially when you don’t see the full orbit because the object hits the ground. If you were to throw a rock and suddenly the entire earth besides that rock collapsed to a single point, your rock will orbit earth in an elliptical orbit.
That is sound advice, the AUR is most definitely not a trusted source though. For the normal arch repos the people who put the stuff there are known, they work for the project, you’re as likely to get malware from one of those as you are to read an article bashing gamespot in gamespot, the people in charge of putting the packages there are the ones with more vested interest in things working so they won’t knowingly introduce malicious code (plus it’s a handful of people who know each other by first name).
The AUR is a different story, because anyone can put stuff there it’s very easy to have malicious code end up there. It doesn’t happen that often because most of the time it’s fairly obvious and it gets flagged straight away, plus if people start doing that people will migrate away from the AUR, so it’s a high risk low reward situation. But as more and more people start to use Arch derivatives that come with the AUR enabled without understanding any of this it becomes a more rewarding thing to exploit.