[PRQ#71339] Deletion Request for stable-diffusion-ui
siavoshkc [1] filed a deletion request for stable-diffusion-ui [2]: This package does not follow security best practices by being too permissive on the permissions given on /opt/${pkgname} The package also really installs an installer and has no control over of what that installer does afterward. This way of packaging is not supported by upstream and security implications are unavoidable as a result of its design. [1] https://aur.archlinux.org/account/siavoshkc/ [2] https://aur.archlinux.org/pkgbase/stable-diffusion-ui/
Request #71339 has been Accepted by Antiz [1]: Thanks for submitting a deletion request. As discussed together (and regarding the recent action I took on this PKGBUILD regarding the security implication) I also don't think this software can be packaged properly system wide but is meant to be used by users in their own userspace instead (e.g. somewhere in their $HOME or something). In addition to the concerns raised in the deletion request, I would add that the $pkgname is wrong and misleading, as this PKGBUILD actually provides the "easy-diffusion" installer, not stable- diffusion-ui. Accepting this deletion request :) [1] https://aur.archlinux.org/account/Antiz/
participants (1)
-
notify＠aur.archlinux.org