Re: Proposal: Make AUR read only before we delete all the malware and figure an solution to it, to stop more coming

On Friday, June 12th, 2026 at 7:16 PM, archlinux.endeared273@passmail.net <archlinux.endeared273@passmail.net> wrote:

Since there are more and more packages and more and more variants, I'd like to second the proposal for a temporary read-only. I mean, most people won't update right now anyways, or shouldn't.

I'd also like to back the proposal of temporarily freezing the AUR. Since this is the new norm, anything we can do to avoid AUR becoming full-on npm is welcome.