Am Tue, 9 Jun 2009 12:59:15 +0200 schrieb Xyne <xyne@archlinux.ca>:
Are there any packages in the official repos that are distributed under the same conditions? I expect that the Arch devs would be reluctant to maintain a portfolio of agreements with various developers granting Arch the right to distribute their work. Perhaps that could be left to the package maintainer but I think they would still be on the line as the official distributors of the packages. I don't really know who bears ultimate responsibility though.
I think it would actually make more sense to provide a trusted version of the AUR with a subset of packages from the AUR that the user could install with the same confidence as the official packages. This would be ideal for avoiding many legal pitfalls but opponents of the idea will simply say that the AUR already does this and that all you need to do is check the PKGBUILD and install scripts yourself.
I didn't want to say, that this package has to be moved to community. I just wanted to say, that it's not impossible, because someone has written, that these fonts may not be distributed. ;-) It's of course sufficient to keep font packages in AUR, especially because there's nothing to compile. A second "trusted" AUR makes not really sense in my eyes. This would make the whole thing more complicated. I think the repos and AUR are ok as they are now. Btw., there was a feature in AUR which TUs could use to mark a PKGBUILD as trusted. I guess there were some reasons, why this feature was removed. Heiko