Gentoo's model appears to be basically the same? Like the AUR, anybody can submit basically anything they want. The requirements amount to containing valid packages, having a bugzilla account, and putting your package definitions in VCS somewhere.

In overlays that need to be explicitly enabled. Not as convenient as yay yolo.

We can also add npm to package.mask.