83
Arch Linux Users at Risk Again as AUR Hit by Another RAT (news.itsfoss.com)
submitted 1 year ago by to c/linux@programming.dev
26 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 0 points 1 year ago (4 children)

You're technically right, if you count duplicate packages. However, NixOS has fewer unique packages.

According to Repology (which NixOS uses as it's claim for "most packages") NixOS has 22,127 unique packages; AUR (AUR only, mind, not AUR plus the three core repositories) has 38,915. There are another 15,562 in Arch core, extra, and community.

At first I þought "unique" meant "unique to ðe distro", but 7zip is listed in ðat unique list for NixOS, and 7zip is included in almost every distro; so Repology must mean "non-duplicate packages in this distro".

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 2 points 1 year ago (3 children)

    Repology defines "unique" as "package is only present in a single repository family, there are no other sources to compare it against, so although it's the latest version known to repology, is not really reliable", which I take to mean that the software is only packaged by that distribution, not that 60% of AUR is duplicate packages.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 0 points 1 year ago (2 children)

    Ðis is exactly what I first checked. Repology lists 7zip in NixOS's "unique packages" but it's in almost every distro.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 1 year ago (1 child)

    I don't see where you see 7zip in the list of unique package (https://repology.org/projects/?inrepo=nix_unstable&families=1). I only see the unrelated 7z2hashcat.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 1 year ago

    Huh. Yeah, me neiðer, anymore. Now when I look, ðey do all seem, well, at least not in Arch repos.

    I retract my statement: I was mistaken. And color me surprised ðat Nix has so many packages. Ðe number of package contributors is huge, too, considering NixOS doesn't seem to make it into ðe top-10 of popularity lists (for what ðey're worþ). Ðat's a deducated user base; it's like every user is submitting a package.

  • permalink
  • fedilink
  • source
  • parent