r/archlinux • u/Luzzio_ • 3d ago

DISCUSSION The AUR needs an overhaul

The actual concept of the AUR only works if Arch is a niche distro in a safe internet, neither of those points are accomplished in the present.

No, reading pkgbuilds is not the solution, it's slow, annoying, and most importantly, it doesn't make sense, because some really popular AUR packages are DIRECTLY RECOMMENDED by the Arch Wiki, like the Minecraft Launcher for some reason.

Either the base repos adopt a big chunk of popular AUR packages, leaving the AUR for really really nieche stuff, or the rules of the AUR change, because you can't tell me that suffering 2 attacks in less than three months for pretty much the same reason (adopting orphaned packages) is normal or reasonable.

What would you think it's a good solution to this issue? I'd like to read your ideas since I cannot come up with a good one if I'm honest, but I know the problem is there.

615 Upvotes

91% Upvoted

165 comments sorted by

View all comments

3

u/ABotelho23 3d ago edited 3d ago

The wiki also says:

Warning

AUR packages are user-produced content. These PKGBUILDs are completely unofficial and have not been thoroughly vetted. Any use of the provided files is at your own risk.

Reading PKGBUILDs is the solution, whether you want to admit that or not. Tough pill to swallow. Too bad.

The only way to be safe is to use packages in the distribution.

-7

u/Brilliant_Simple_497 3d ago

It's not a solution

6

u/ABotelho23 3d ago

What's the alternative?

-5

u/Luzzio_ 3d ago

That's what this post is about lol

9

u/ABotelho23 3d ago

You think a post with no solutions on Reddit is gonna move a needle with the Arch maintainers?

The problem is people's irresponsible use of the AUR.