• VirtuePacket@lemmy.zip
    link
    fedilink
    arrow-up
    14
    arrow-down
    2
    ·
    edit-2
    2 months ago

    I think I’d be satisfied with just not allowing people to take over orphaned packages. That seems like a glaring attack vector and closing it would not harm the AUR in any way.

    And yea, arch (and its derivatives) probably should not ship with AUR helpers pre-installed.

    • Kazel@lemmy.dbzer0.com
      link
      fedilink
      arrow-up
      15
      ·
      2 months ago

      arch doesn’t ship an aur helper pre installed. It’s the derivates leeching the arch aur infrastructure and preinstalling aur helpers suggesting it’s safe to use as is