[aur-general] AUR helpers in [community]?

[Heiko Baums]

Am Thu, 18 Nov 2010 22:20:01 +0100
schrieb Lukas Fleischer <archlinux at cryptocrack.de>:

> I basically agree. The AUR is unsupported and has nothing to do with
> Arch Linux or the [community] repository.

Since when doesn't have AUR anything to do with Arch Linux or
[community] repo? AUR is totally Arch Linux related and can only be
used with Arch Linux. And [community] repo is the repo where AUR
packages go when they got enough votes and a TU interested in
maintaining them.

> Both of them have more than 100 votes but are not
> moved since we don't want alternative package managers in the repos.
> There's no other convincing reason for that. They are just
> unsupported.

AUR wrappers are not added to the repos for security reasons as far as
I know. It's because users may tend to not reading and validating the
PKGBUILDs and install scripts, which can be uploaded to AUR by everyone
without being validated by a dev or TU, if they use such a wrapper.
Keyword: rm -rf /

Maybe they are also not added because neither devs nor TUs can ensure
that they are always working correctly.

I'm not sure if there are other reasons, too.

> Moreover, if people use packages from the AUR so extensively that they
> need AUR helpers, they should be fine with building one more package
> from source, shouldn't they? (Don't take that last sentence too
> serious. Please.)

In this point I agree.

Heiko