Nice, I need to edit those files then.

Nice, I need to remember this, the password prompt stalls my installs all the time.

Do you know how to know what packages are those that last forever to compile?

Nice!

You can also set the option in the config files

I didn't know that. I will have to try that out. Thanks.

Sick

It even looks like pamac.

Never in my life would I have imagined something like this xD

Now I just wonder if OpenBSD has Wayland support. Maybe I should just try i3 WM with it. Or just switch to Artix.

It's funny because I just read an article from a guy who claimed to be a die hard lover of the older init system, then he was talking about how he changed his mind and systemd is the best thing since sliced bread. Makes me wonder if dude was shilling and why.

they seem mad

note that as usual in media the headline is less true than the article. nobody said "under control" but "all known commits have been reverted"

It’s basically a public wiki of scripts, being editable by anyone is the entire point. If you don’t want to run random scripts from random people, don’t use AUR.

Absolutely ludicrous. These are very very strong packages.

Well, cardboard’s out.

Well, the packages are not supposed contain malware for a start.

If I copy paste a malicious script here and you run it without knowing/checking what it do, do you think your instance admin should also put more rules and restrictions for the whole instance? AUR is no different than github or pastebin. It is on the user to vet what script they are running. Arch already has a more strict and vetted repo by the maintainer. Having AUR be a vetted place has no real good solution because of easy botting.

For the AUR I think anything goes.

That's not what the AUR does. They simply provide a platform for users to share build scripts. There isn't much they can do beyond trying to vet accounts based on flimsy metrics, or weeding things out every now and then.

The problem is that some people and even distros treat the AUR as a trusted source of software.

All user repositories (javascript, Python etc.) suffer from malware btw.; the AUR is different in that it explicitely puts the responsibility of building packages on the user.

...

I'm still missing some palpable information about these injections/malwares.
https://bbs.archlinux.org/viewtopic.php?id=313892

What sort of standards are these packages built to?

Well, there are regulations governing the code they can be made of.

Oh, very rigorous software engineering standards.

I’m not saying it wasn’t safe, it’s just perhaps not quite as safe as some of the other ones.

Well, I was thinking more about the other ones.