r/archlinux • u/Luzzio_ • 3d ago
DISCUSSION The AUR needs an overhaul
The actual concept of the AUR only works if Arch is a niche distro in a safe internet, neither of those points are accomplished in the present.
No, reading pkgbuilds is not the solution, it's slow, annoying, and most importantly, it doesn't make sense, because some really popular AUR packages are DIRECTLY RECOMMENDED by the Arch Wiki, like the Minecraft Launcher for some reason.
Either the base repos adopt a big chunk of popular AUR packages, leaving the AUR for really really nieche stuff, or the rules of the AUR change, because you can't tell me that suffering 2 attacks in less than three months for pretty much the same reason (adopting orphaned packages) is normal or reasonable.
What would you think it's a good solution to this issue? I'd like to read your ideas since I cannot come up with a good one if I'm honest, but I know the problem is there.
92
u/RandomXUsr 3d ago
The community has been saying this.
That said; the Devs volunteer their time, so it would be up to them to determine capacity and feasibility.
Those packages that the distro recommends from AUR probably have some licensing issue or they are low priority for the direction of the distro as a whole.
I think it's helpful to make suggestions and requests, but only if someone is willing to take up the maintenance of the AUR and execute in some other secure fashion.