@bacteriostat@infosec.exchange
2025-07-18 19:16 UTC
@archlinux@fosstodon.org
Just thinking out lound but can't we have a more interesting system to improve the security of AUR?
My suggestions:
1) Arch Packagers can appoint AUR maintainers who are trusted to benign. Maybe by number packages or votes on packages.
2) Every new AUR package should require to be approved by an AUR maintainer irrespective of the age of account.
Replies (2)
-
@m@miruku.cafe 2025-07-18 19:41
@bacteriostat@infosec.exchange @archlinux@fosstodon.org there are not enough people to do this
-
@squalouJenkins@fosstodon.org 2025-07-18 19:44
@bacteriostat@infosec.exchange @archlinux@fosstodon.org the whole point of AUR is *not* having this, as compared to official repos.