this post was submitted on 14 Jun 2026

141 points (97.3% liked)

Linux

14103 readers

194 users here now

A community for everything relating to the GNU/Linux operating system (except the memes!)

Also, check out:

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

founded 3 years ago

MODERATORS

Ategon@programming.dev

anzo@programming.dev

dwraf_of_ignorance@programming.dev

141

The security situation with the Arch Linux AUR got a lot worse (www.gamingonlinux.com)

submitted 1 week ago by cm0002@europe.pub to c/linux@programming.dev

40 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] 0_o7@lemmy.dbzer0.com 7 points 1 week ago (1 children)

imo, there should be automatic tags like "active", "abandoned", "maintainer changed recently", "updated after hiatus" and a few more.

The arch devs and community can decide on the time frames. It's not going to be perfect, but it may help warn users of the changes and so they can do a double take.

Anything other than the "active" ones should show what changed (paru already does this) and users should make a conscious choice to install it anyway. (y/N) instead of going through the installation spamming the return key.

[–] bitfucker@programming.dev 2 points 1 week ago

There's a reason why we already called it orphaned. The flag already exists. The AUR helper that auto updates stuff is the problem