The Arch User Repository (AUR) has been subjected to a sustained attack recently. The attacker, [...]
  • stuner@lemmy.world
    13·
    5 days ago

    It really should be shut down for Arch’s sake.

    I think it should really be split into two parts:

    1. The more widely used packages should be moved to an official repository with review procedures. Perhaps the (quality) requirements can be lower, but these must be reviewed by trusted people.
    2. The remaining packages should be moved to user namespaces, like the other user-package repos do. That will at least prevent (most) takeover attacks.