Am Thu, 18 Nov 2010 22:20:01 +0100 schrieb Lukas Fleischer <archlinux@cryptocrack.de>:
I basically agree. The AUR is unsupported and has nothing to do with Arch Linux or the [community] repository.
Since when doesn't have AUR anything to do with Arch Linux or [community] repo? AUR is totally Arch Linux related and can only be used with Arch Linux. And [community] repo is the repo where AUR packages go when they got enough votes and a TU interested in maintaining them.
Both of them have more than 100 votes but are not moved since we don't want alternative package managers in the repos. There's no other convincing reason for that. They are just unsupported.
AUR wrappers are not added to the repos for security reasons as far as I know. It's because users may tend to not reading and validating the PKGBUILDs and install scripts, which can be uploaded to AUR by everyone without being validated by a dev or TU, if they use such a wrapper. Keyword: rm -rf / Maybe they are also not added because neither devs nor TUs can ensure that they are always working correctly. I'm not sure if there are other reasons, too.
Moreover, if people use packages from the AUR so extensively that they need AUR helpers, they should be fine with building one more package from source, shouldn't they? (Don't take that last sentence too serious. Please.)
In this point I agree. Heiko